PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
ca5f96b04a9d4a595a9f2f87ba357f10N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ca5f96b04a9d4a595a9f2f87ba357f10N.dll
Resource
win10v2004-20240802-en
Target
ca5f96b04a9d4a595a9f2f87ba357f10N.exe
Size
3.5MB
MD5
ca5f96b04a9d4a595a9f2f87ba357f10
SHA1
19b7833c3d9fe91efbc7fc6178caca232564f496
SHA256
0816bde5553aaf19c80d865835242c8c113be336011ce41d4f58c3d4582acb27
SHA512
1c56555b9fd5b173072a5f48b145ff00633d70ed34808c48f799a01a102cf226f9ad5f939726466ab07555799e13cb4282842ef880b901a160e3d8cba987bb04
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zg:8QKotcTlBk9YwzEhPbYzjmMtccXk8KM
Checks for missing Authenticode signature.
resource |
---|
ca5f96b04a9d4a595a9f2f87ba357f10N.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ