PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
c48888d5ac5577d0f6984eb69b6d3574c41e7babb08b6a371341e3d0a0de775c.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c48888d5ac5577d0f6984eb69b6d3574c41e7babb08b6a371341e3d0a0de775c.dll
Resource
win10v2004-20240802-en
Target
c48888d5ac5577d0f6984eb69b6d3574c41e7babb08b6a371341e3d0a0de775c
Size
3.5MB
MD5
621fe69b9a17e0c7b4b17d144e10b599
SHA1
a702b444aadc527dc2c8db9d28576d8fb85fe844
SHA256
c48888d5ac5577d0f6984eb69b6d3574c41e7babb08b6a371341e3d0a0de775c
SHA512
23a1dfd12ba6993b53f420778076fdb17bc5245c8a64e3eaba130dbaca39f7525ee48bff61c06cf9ec3eebb37d5c283096d0bfe1352716b768b686369e365768
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zI:8QKotcTlBk9YwzEhPbYzjmMtccXk8KM
Checks for missing Authenticode signature.
resource |
---|
c48888d5ac5577d0f6984eb69b6d3574c41e7babb08b6a371341e3d0a0de775c |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ