PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
b8ae813079c14b8e9e830fe87a2a371ff59bafb8e99997d72de1cfddbe54f8d6.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b8ae813079c14b8e9e830fe87a2a371ff59bafb8e99997d72de1cfddbe54f8d6.dll
Resource
win10v2004-20240802-en
Target
b8ae813079c14b8e9e830fe87a2a371ff59bafb8e99997d72de1cfddbe54f8d6
Size
3.5MB
MD5
bf0a3686a09ae6c7f54cc27595f2012c
SHA1
e22b3b00ccc8c685e32ce32b99cfafa32df896db
SHA256
b8ae813079c14b8e9e830fe87a2a371ff59bafb8e99997d72de1cfddbe54f8d6
SHA512
6b33b979e84934bafa8ea6622fe1f1773aa67b68785ce3ead4a41e903210a73efb65c9d41fc1e00f56255c42d410517cb8427cb8e0a541ffe897c0e33b77990a
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zk:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kw
Checks for missing Authenticode signature.
resource |
---|
b8ae813079c14b8e9e830fe87a2a371ff59bafb8e99997d72de1cfddbe54f8d6 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ