PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
9e4e128766736bc85be7b9e35c6a956767cbdccc3084d1c2d56b005bec3d7f40.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9e4e128766736bc85be7b9e35c6a956767cbdccc3084d1c2d56b005bec3d7f40.dll
Resource
win10v2004-20240802-en
Target
9e4e128766736bc85be7b9e35c6a956767cbdccc3084d1c2d56b005bec3d7f40
Size
3.5MB
MD5
e76ff711001125cbc9ec7de7fd1fe557
SHA1
08ed6d4c39273df684d40dd40a4e2c78bad9a042
SHA256
9e4e128766736bc85be7b9e35c6a956767cbdccc3084d1c2d56b005bec3d7f40
SHA512
a6486ed7c262748ff3c35ce2d6e8257035b8c12b089040a07a6ce2a36846b56f73e3726b3fba2fc75e1764d19bc440b302e37abda88e28e460351095c18978bc
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zN:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kx
Checks for missing Authenticode signature.
resource |
---|
9e4e128766736bc85be7b9e35c6a956767cbdccc3084d1c2d56b005bec3d7f40 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ