PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
bcc8754e2da52a7dc705db8d6c1d1ad0N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bcc8754e2da52a7dc705db8d6c1d1ad0N.dll
Resource
win10v2004-20240802-en
Target
bcc8754e2da52a7dc705db8d6c1d1ad0N.exe
Size
3.5MB
MD5
bcc8754e2da52a7dc705db8d6c1d1ad0
SHA1
51bf7fe148ceda528d807b274eb4df49f04801f7
SHA256
1de4d9f07f5d037a86e0629be0ed9b573fe17bd6ed6c6fa07e08fbcd9b51a3cf
SHA512
3254b2f3d71ea39373f7033ff07437f7ceb7cf5fca305330d50dd971c8ba5b15de05908a29406027f55f90686a50ee60ab81031a0bd9260795d6cabddb80e899
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zb:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kv
Checks for missing Authenticode signature.
resource |
---|
bcc8754e2da52a7dc705db8d6c1d1ad0N.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ