PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
43dff212f8902f638d9d71c1be7b1380N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
43dff212f8902f638d9d71c1be7b1380N.dll
Resource
win10v2004-20240802-en
Target
43dff212f8902f638d9d71c1be7b1380N.exe
Size
3.5MB
MD5
43dff212f8902f638d9d71c1be7b1380
SHA1
3f89e75a050a97fce849658e29046bc146acbb6a
SHA256
c38815c96b8dc6759512db4ac20a48afe67e35e41184c9fe139ef5fdfc9166df
SHA512
02b36ba8366919969f05dfb8010fd10ef6a7ad5e837e5f2101a4baf97f947d7fd8740b3b53675bef80d7ea1251fd6fdefb80fa22e679d9b1b8fbf7798bf4129c
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zz:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kf
Checks for missing Authenticode signature.
resource |
---|
43dff212f8902f638d9d71c1be7b1380N.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ