PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
14cd7efe7c4a1872092d85dca60426177d38abe79fa2b4ac7b5cefdd7527c8d7.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
14cd7efe7c4a1872092d85dca60426177d38abe79fa2b4ac7b5cefdd7527c8d7.dll
Resource
win10v2004-20240802-en
Target
14cd7efe7c4a1872092d85dca60426177d38abe79fa2b4ac7b5cefdd7527c8d7
Size
3.5MB
MD5
41e0791a5c3922cf6e7764a84604b951
SHA1
53e150c6b654bd93928bc24e8cfb7ef52e164c12
SHA256
14cd7efe7c4a1872092d85dca60426177d38abe79fa2b4ac7b5cefdd7527c8d7
SHA512
419e8b9d73198d71b59e8d503473c963c244760a5e023328e3bb5423277751fb48f4b75cd25a2669ac30c62555fbfab6428caae4495decd62f1117ad932c6aaa
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+z0:8QKotcTlBk9YwzEhPbYzjmMtccXk8KI
Checks for missing Authenticode signature.
resource |
---|
14cd7efe7c4a1872092d85dca60426177d38abe79fa2b4ac7b5cefdd7527c8d7 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ