PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
74f5ccf8fc2f9661e9d8144c24693740N.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
74f5ccf8fc2f9661e9d8144c24693740N.dll
Resource
win10v2004-20240802-en
Target
74f5ccf8fc2f9661e9d8144c24693740N.exe
Size
3.5MB
MD5
74f5ccf8fc2f9661e9d8144c24693740
SHA1
58b1fce5751a003cb7d59a74d4c46e6af4ac38f9
SHA256
62082102a9ad026d64e60e4ddb20a1c2f6dc1db0e442a0e1076ee375e0e8a824
SHA512
2fa0d309f4a0518bfed7ed5e05d56a2d959f11ca8c8212920662c44338a907c9372b9a1d420871b593f0f4926024db1984ca769a970d8227d70bc277de3b74ee
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zQ:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kk
Checks for missing Authenticode signature.
resource |
---|
74f5ccf8fc2f9661e9d8144c24693740N.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ