PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
46664917fcb98a2b4624b95572983210N.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
46664917fcb98a2b4624b95572983210N.dll
Resource
win10v2004-20240802-en
Target
46664917fcb98a2b4624b95572983210N.exe
Size
3.5MB
MD5
46664917fcb98a2b4624b95572983210
SHA1
06da14569c5690fcb2a72a7e7405351f04f1531e
SHA256
c1451c592afc81ac52abd3cac6c5552ced93e967fbb9bedf44e36c9f0f18987c
SHA512
aed0753871850c4988fc6ffdd041507aca024662585a70c30a5f0f48fc8f9fecdec57f1d01e9ebe7e1ded3ca7ef32c93a3e7f57b78a9086f9b3d2aa73404b5dc
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zB:8QKotcTlBk9YwzEhPbYzjmMtccXk8K9
Checks for missing Authenticode signature.
resource |
---|
46664917fcb98a2b4624b95572983210N.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ