PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
0587889d16db8aa5c21b73e05110fc9f8749e8f965b87058f7f890db3436a634.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0587889d16db8aa5c21b73e05110fc9f8749e8f965b87058f7f890db3436a634.dll
Resource
win10v2004-20240802-en
Target
0587889d16db8aa5c21b73e05110fc9f8749e8f965b87058f7f890db3436a634
Size
3.5MB
MD5
0ad582f5e2e198dc5d85ed023535fd6e
SHA1
13ac342b3ae46bab0ecd3c9e3eaac2c3a09a5679
SHA256
0587889d16db8aa5c21b73e05110fc9f8749e8f965b87058f7f890db3436a634
SHA512
453e9c0c643a01db51d527bfbbab666e94c4b3f5f93bfcec30143d5a051fa20d5faf825e2539b58304db578541c3cc2f344ca969e6abe4b454fa4f2b353de356
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zY:8QKotcTlBk9YwzEhPbYzjmMtccXk8K8
Checks for missing Authenticode signature.
resource |
---|
0587889d16db8aa5c21b73e05110fc9f8749e8f965b87058f7f890db3436a634 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ