PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
59c65f094741dbd8c6510027cd58336bafa733cf04ee1dd80247476c59d6c5d6.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
59c65f094741dbd8c6510027cd58336bafa733cf04ee1dd80247476c59d6c5d6.dll
Resource
win10v2004-20240802-en
Target
59c65f094741dbd8c6510027cd58336bafa733cf04ee1dd80247476c59d6c5d6
Size
3.5MB
MD5
a2ff920cc04fe49a4ac5b3476c3e6f3d
SHA1
2b3950b7e893c28232f2ccb014cd5fe62ec4d309
SHA256
59c65f094741dbd8c6510027cd58336bafa733cf04ee1dd80247476c59d6c5d6
SHA512
e782b7a21a9168b29e0567398eb0378ee18f23440fa36b5fc982aa0d2577bb07421024b7ab27d88bac7f60cee4b919afe81afb449f4acea119c9c84cbe3df6c7
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+z9:8QKotcTlBk9YwzEhPbYzjmMtccXk8KB
Checks for missing Authenticode signature.
resource |
---|
59c65f094741dbd8c6510027cd58336bafa733cf04ee1dd80247476c59d6c5d6 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ