PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
783a43128f06f1e45bdf3aac53fd1ca5c5d6cf5aedea77f370686a4e4cfc2fd4.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
783a43128f06f1e45bdf3aac53fd1ca5c5d6cf5aedea77f370686a4e4cfc2fd4.dll
Resource
win10v2004-20240802-en
Target
783a43128f06f1e45bdf3aac53fd1ca5c5d6cf5aedea77f370686a4e4cfc2fd4
Size
3.5MB
MD5
969c6fe71db820500808a0a2fb41bfd3
SHA1
0ebf7e5040244d4f676a05431d88e2292d7381f5
SHA256
783a43128f06f1e45bdf3aac53fd1ca5c5d6cf5aedea77f370686a4e4cfc2fd4
SHA512
2596f39fb94b6e68432d543c8b6e457d73f8bee5889d1fb3ab6b9ff372dae120be01080fe7770949b2667b5c93c38a33a3ab6b9533770d6257c36547e0a52c61
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zX:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kj
Checks for missing Authenticode signature.
resource |
---|
783a43128f06f1e45bdf3aac53fd1ca5c5d6cf5aedea77f370686a4e4cfc2fd4 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ