PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
953533c41f5d4909b2182be7e8f83b4fc3f3b220827cb73ee0a09ea2a7466c09.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
953533c41f5d4909b2182be7e8f83b4fc3f3b220827cb73ee0a09ea2a7466c09.dll
Resource
win10v2004-20240802-en
Target
953533c41f5d4909b2182be7e8f83b4fc3f3b220827cb73ee0a09ea2a7466c09
Size
3.5MB
MD5
3e6fe4c410d06e2812f141ac65abc934
SHA1
3d18d4f5934b52150c7c39d9de579e69364902bb
SHA256
953533c41f5d4909b2182be7e8f83b4fc3f3b220827cb73ee0a09ea2a7466c09
SHA512
1819532c2d672500f3289e8222ef1240a26e2677b4cdbd85d38e6d8f125e5960b85f251000d4e05ebed0d1e6b3a3272256b91b8ad064699d33b05fbf747aca5a
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zW:8QKotcTlBk9YwzEhPbYzjmMtccXk8Ky
Checks for missing Authenticode signature.
resource |
---|
953533c41f5d4909b2182be7e8f83b4fc3f3b220827cb73ee0a09ea2a7466c09 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ