PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
3fecf2e1c034b67c447fd7838e4ae9d9c43af5e46f6bd0368911b5c0ffe36118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
3fecf2e1c034b67c447fd7838e4ae9d9c43af5e46f6bd0368911b5c0ffe36118.dll
Resource
win10v2004-20240802-en
Target
3fecf2e1c034b67c447fd7838e4ae9d9c43af5e46f6bd0368911b5c0ffe36118
Size
3.5MB
MD5
f9941314f07a54a035b23fd9f9c5ecfe
SHA1
eae7d7e11cd297735cdf13f12bb84d3a4995094c
SHA256
3fecf2e1c034b67c447fd7838e4ae9d9c43af5e46f6bd0368911b5c0ffe36118
SHA512
c2f4f498caa6996ed46e3cd0662008119017d3ff023b6f42a1dfac381f0cfcb9e7cb4eba91a37287eed029db336da4ca5e19885dd10e450ad7a51ed2f050be7d
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zO:8QKotcTlBk9YwzEhPbYzjmMtccXk8K6
Checks for missing Authenticode signature.
resource |
---|
3fecf2e1c034b67c447fd7838e4ae9d9c43af5e46f6bd0368911b5c0ffe36118 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ