PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
8bf8a9f5df118eab121b1365a390024b97d6be636f3fa7a1f70b3aceec92d62c.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8bf8a9f5df118eab121b1365a390024b97d6be636f3fa7a1f70b3aceec92d62c.dll
Resource
win10v2004-20240802-en
Target
8bf8a9f5df118eab121b1365a390024b97d6be636f3fa7a1f70b3aceec92d62c
Size
3.5MB
MD5
4e39252b60c48ce57c15a982a517101f
SHA1
e4d16f79a709cedf7bbb637808cc8bcb428387b8
SHA256
8bf8a9f5df118eab121b1365a390024b97d6be636f3fa7a1f70b3aceec92d62c
SHA512
f11e3f96b4b0dc60d475a3c6b9f2f9702c6f61850a7118fa3f70cf6471ec3c3e6a1e17846da8e82bc6dfb6f6771ffe7acf28cf804a1120911996d74dfff8a1c5
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zO:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kq
Checks for missing Authenticode signature.
resource |
---|
8bf8a9f5df118eab121b1365a390024b97d6be636f3fa7a1f70b3aceec92d62c |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ