PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
724cf032d585ff07fa57f6740655784447703755be9198b18fdd8e421e31220e.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
724cf032d585ff07fa57f6740655784447703755be9198b18fdd8e421e31220e.dll
Resource
win10v2004-20240802-en
Target
724cf032d585ff07fa57f6740655784447703755be9198b18fdd8e421e31220e
Size
3.5MB
MD5
a8e25c4f4677cdca206e41bff279d34b
SHA1
c0e5d05a3015bae5657b23930bb2842fc197c905
SHA256
724cf032d585ff07fa57f6740655784447703755be9198b18fdd8e421e31220e
SHA512
be07c052b73eb36afeeebd4db7bf3cb3b74c1728f13fc63278ed1b4a4e8cbae3a4949acb5d1ece092716d3c4085b61e9f1fdc2fc598589e45be23ed5803b200c
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zW:8QKotcTlBk9YwzEhPbYzjmMtccXk8KC
Checks for missing Authenticode signature.
resource |
---|
724cf032d585ff07fa57f6740655784447703755be9198b18fdd8e421e31220e |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ