PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
fa2506769e2998cbebe29c168451471f16df0c5f1c0511a0b4203ad95f36bd67.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
fa2506769e2998cbebe29c168451471f16df0c5f1c0511a0b4203ad95f36bd67.dll
Resource
win10v2004-20240802-en
Target
fa2506769e2998cbebe29c168451471f16df0c5f1c0511a0b4203ad95f36bd67
Size
3.5MB
MD5
451dc856631aad5ee8aca4bd34c9ac3a
SHA1
4d8c4eb00e7c0c4be9744d105fcd6f59b48140d7
SHA256
fa2506769e2998cbebe29c168451471f16df0c5f1c0511a0b4203ad95f36bd67
SHA512
0f967e9b633ce9bd7efab6ae2851b5f12f1d4aef39831b6600684dca05ae35d47b3cd62e47d25af3ab2968ef612c954a877fd6c1823b7c660bc3ef6dba0d8ea7
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zC:8QKotcTlBk9YwzEhPbYzjmMtccXk8Ku
Checks for missing Authenticode signature.
resource |
---|
fa2506769e2998cbebe29c168451471f16df0c5f1c0511a0b4203ad95f36bd67 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ