PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
1ba84eb777e6e302a2e300daf18eb0a0N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1ba84eb777e6e302a2e300daf18eb0a0N.dll
Resource
win10v2004-20240802-en
Target
1ba84eb777e6e302a2e300daf18eb0a0N.exe
Size
3.5MB
MD5
1ba84eb777e6e302a2e300daf18eb0a0
SHA1
bfbfbee9de02da9c310d8858054b78377f2b278f
SHA256
6a2905feaeb32a6505858cbee8efa4e7325153ca549dab4ea36df2a63647f7b6
SHA512
4ef325461cd77ebca1cc1737374c67b99fc1fa20a7dbe270111cf251f0f63146688ef28a6cfafd5a447608a84b12844db0ba18f1116c71dec53abf82a2778c5f
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+z+:8QKotcTlBk9YwzEhPbYzjmMtccXk8Ki
Checks for missing Authenticode signature.
resource |
---|
1ba84eb777e6e302a2e300daf18eb0a0N.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ