PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
ea1bc669da842b57274935350bf33e6d658183c1748bb90169f29630743dfbc9.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ea1bc669da842b57274935350bf33e6d658183c1748bb90169f29630743dfbc9.dll
Resource
win10v2004-20240802-en
Target
ea1bc669da842b57274935350bf33e6d658183c1748bb90169f29630743dfbc9
Size
3.5MB
MD5
b68d1164740030097bb1fc58f06d7450
SHA1
638fcee491c128499e9c610fc60bdb8a363758d3
SHA256
ea1bc669da842b57274935350bf33e6d658183c1748bb90169f29630743dfbc9
SHA512
5015f32e829897f9db7cf11808a9d2b687c8c509e24550a984fd6a9282f1f596137a1d7a63c9fcb88466a9cd8723bf6a929cbecec67ab5620d8d8dc7b0d50bf8
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zL:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kf
Checks for missing Authenticode signature.
resource |
---|
ea1bc669da842b57274935350bf33e6d658183c1748bb90169f29630743dfbc9 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ