PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
2ff1f147c8e8c52a7521654570ee68c0N.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2ff1f147c8e8c52a7521654570ee68c0N.dll
Resource
win10v2004-20240802-en
Target
2ff1f147c8e8c52a7521654570ee68c0N
Size
3.5MB
MD5
2ff1f147c8e8c52a7521654570ee68c0
SHA1
4caad02165aae27cff8a027a202fc8907f7f42c1
SHA256
86db7e2e3d44c288b5f81166af05bb4feddfe757bd76c67bf11fd766d65d9a0d
SHA512
193e240e4cbb6e70736bffa08476a3118e22dc30dad8169f88bf2df141969b177e19c771f0a7ab33b22e329360bd058741b15facce55b7c0306107c77fbc5436
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zQ:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kk
Checks for missing Authenticode signature.
resource |
---|
2ff1f147c8e8c52a7521654570ee68c0N |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ