PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
b91e52ce5ddd23e1fad533114b1ba770N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b91e52ce5ddd23e1fad533114b1ba770N.dll
Resource
win10v2004-20240802-en
Target
b91e52ce5ddd23e1fad533114b1ba770N.exe
Size
3.5MB
MD5
b91e52ce5ddd23e1fad533114b1ba770
SHA1
c9c4be1a92bf37c17a0f2b8fbdabc4702ae8b44a
SHA256
a441a33ad6479b2eea7780f8af02f6c8f6730b5d60fdddaf17dd462a9d1c055e
SHA512
ab437ba1347caf5fcf5b8944aabf68f61220225b0212bef6480489906c08097dd724528b0d654f60f07f400bdfbd7c0e0d5c55470c8ec31c1c9c6fcb1f6ac304
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zy:8QKotcTlBk9YwzEhPbYzjmMtccXk8K2
Checks for missing Authenticode signature.
resource |
---|
b91e52ce5ddd23e1fad533114b1ba770N.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ