PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
8b03a7217753a1229814f099f1671a570439652671ad7045d3ffeb7e5b5aef06.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8b03a7217753a1229814f099f1671a570439652671ad7045d3ffeb7e5b5aef06.dll
Resource
win10v2004-20240802-en
Target
8b03a7217753a1229814f099f1671a570439652671ad7045d3ffeb7e5b5aef06
Size
3.5MB
MD5
3a9c46486264f59018c197444289b4c1
SHA1
a686a56479b82cbe78f853a032205e1efdafeb33
SHA256
8b03a7217753a1229814f099f1671a570439652671ad7045d3ffeb7e5b5aef06
SHA512
171ce38b4a1dbd97fe30a29f8db96448ba93903b3383b8a558b97dd41e096af4d583a903231e0e02b52db86b5d30974301246c227186d9ac34d89b9afaf560f7
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+z3:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kr
Checks for missing Authenticode signature.
resource |
---|
8b03a7217753a1229814f099f1671a570439652671ad7045d3ffeb7e5b5aef06 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ