PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
d8e77bac67a33b18c84863576b8b9392f3e2988c3363df238232bd394a974990.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d8e77bac67a33b18c84863576b8b9392f3e2988c3363df238232bd394a974990.dll
Resource
win10v2004-20240802-en
Target
d8e77bac67a33b18c84863576b8b9392f3e2988c3363df238232bd394a974990
Size
3.5MB
MD5
7a075a04b111a736da901566b8fea468
SHA1
0195d35f65ef53dc25d04a08d3b99bfd7f827709
SHA256
d8e77bac67a33b18c84863576b8b9392f3e2988c3363df238232bd394a974990
SHA512
35c94ce5f08827a303bbc83cde19628a178e587a3d1fe4b182b431e0445769639718289323b820a0acf8f907f7a38cd385a63c03792ae83dc026a8c90d9917d8
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zm:8QKotcTlBk9YwzEhPbYzjmMtccXk8KS
Checks for missing Authenticode signature.
resource |
---|
d8e77bac67a33b18c84863576b8b9392f3e2988c3363df238232bd394a974990 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ