PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
bc89b4b2bbc85b62b4cd8a51dd60c1023d604e88fc115d400bdd0b5e7d3a672b.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bc89b4b2bbc85b62b4cd8a51dd60c1023d604e88fc115d400bdd0b5e7d3a672b.dll
Resource
win10v2004-20240802-en
Target
bc89b4b2bbc85b62b4cd8a51dd60c1023d604e88fc115d400bdd0b5e7d3a672b
Size
3.5MB
MD5
710716be5b1c24f9a32213b0b004d774
SHA1
7f13c3ef3d1d7f3f066f17d720e1d266c7537c71
SHA256
bc89b4b2bbc85b62b4cd8a51dd60c1023d604e88fc115d400bdd0b5e7d3a672b
SHA512
8084ccbbc4a49b744b72a09c735d1717f81c1be29a4e5cba5b0695234d7c6f1739260f859a67cba5da6d3095e396cfd505d5d586e4eb351b1c2a913304431c7a
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zl:8QKotcTlBk9YwzEhPbYzjmMtccXk8KB
Checks for missing Authenticode signature.
resource |
---|
bc89b4b2bbc85b62b4cd8a51dd60c1023d604e88fc115d400bdd0b5e7d3a672b |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ