PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
f1f72c576ce2771936c728cff52061d39c191c8c6db2f0f643f40220a610b675.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f1f72c576ce2771936c728cff52061d39c191c8c6db2f0f643f40220a610b675.dll
Resource
win10v2004-20240802-en
Target
f1f72c576ce2771936c728cff52061d39c191c8c6db2f0f643f40220a610b675
Size
3.5MB
MD5
43ee53168316ca4318844646f278f166
SHA1
ecac444a9cdd6389509b3c56048c18a0d1576d34
SHA256
f1f72c576ce2771936c728cff52061d39c191c8c6db2f0f643f40220a610b675
SHA512
2e0684f21c4aae1d824dda18f44aeb43b7e6a17e7444bacf53085b2faf5db64c6e16bd44e06d169d2aafb8178c722098a9953f526b06917eb459198052ffd7db
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+z0:8QKotcTlBk9YwzEhPbYzjmMtccXk8KY
Checks for missing Authenticode signature.
resource |
---|
f1f72c576ce2771936c728cff52061d39c191c8c6db2f0f643f40220a610b675 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ