PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
2d6c069ad1a68fa2bb8fe5b752725c20N.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2d6c069ad1a68fa2bb8fe5b752725c20N.dll
Resource
win10v2004-20240802-en
Target
2d6c069ad1a68fa2bb8fe5b752725c20N.exe
Size
3.5MB
MD5
2d6c069ad1a68fa2bb8fe5b752725c20
SHA1
24b1bb79654c7d15942033e6c65f01d3c54b3723
SHA256
8440f38b3cc461fc3c1b2457c46441830597d84accf80fd2624fb70d3ca4df29
SHA512
ba3b61732d1c903ab0845c2309454037d5fa7ed3a7d37b1fbcb84e47982f52ddd9d75a3788dc3eb36f37ce28488ff9cb12ab418c06c2a458db4c4bd416d11e9c
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+z3:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kj
Checks for missing Authenticode signature.
resource |
---|
2d6c069ad1a68fa2bb8fe5b752725c20N.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ