PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
b034b5f98a5fe6ee9d075398c8feecded077bcb7193c3ccfecfc5a8768ed831c.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b034b5f98a5fe6ee9d075398c8feecded077bcb7193c3ccfecfc5a8768ed831c.dll
Resource
win10v2004-20240802-en
Target
b034b5f98a5fe6ee9d075398c8feecded077bcb7193c3ccfecfc5a8768ed831c
Size
3.5MB
MD5
a6ae57f581a74991a0a7a2f930a4c8b2
SHA1
eb4f2456d6929cdc2a59396fe3378ff3ef0b4ecd
SHA256
b034b5f98a5fe6ee9d075398c8feecded077bcb7193c3ccfecfc5a8768ed831c
SHA512
d0b87f74e0ba14d446972975df4febc3739745c30ebc3d1ecc6e11acafcff539dc3992a44623f48fc7cc3ad6d309b4408ebe1933b92d938201924c66ba17cac3
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zn:8QKotcTlBk9YwzEhPbYzjmMtccXk8KD
Checks for missing Authenticode signature.
resource |
---|
b034b5f98a5fe6ee9d075398c8feecded077bcb7193c3ccfecfc5a8768ed831c |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ