PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
2bbd2463cc1a583efee9080bd7c9737f3889fde6a019d83418a1dd01c87425a9.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2bbd2463cc1a583efee9080bd7c9737f3889fde6a019d83418a1dd01c87425a9.dll
Resource
win10v2004-20240802-en
Target
2bbd2463cc1a583efee9080bd7c9737f3889fde6a019d83418a1dd01c87425a9
Size
3.5MB
MD5
c1e220f5089dd4c5c0c2d3a6b86f7d31
SHA1
1d4d712d75a860b1f30b445b3921a158563f15f9
SHA256
2bbd2463cc1a583efee9080bd7c9737f3889fde6a019d83418a1dd01c87425a9
SHA512
46f7cb6b00d94b8193c60dca58a558b3e1da3efe2e122f4543581d47a31f6fb736c668d0cea90d6555919abdb93b056434342f445ee50abd6e71c91663f9d102
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zS:8QKotcTlBk9YwzEhPbYzjmMtccXk8KW
Checks for missing Authenticode signature.
resource |
---|
2bbd2463cc1a583efee9080bd7c9737f3889fde6a019d83418a1dd01c87425a9 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ