PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
08bb0d07649a61b0a2345de3b9d66c40N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
08bb0d07649a61b0a2345de3b9d66c40N.dll
Resource
win10v2004-20240802-en
Target
08bb0d07649a61b0a2345de3b9d66c40N
Size
3.5MB
MD5
08bb0d07649a61b0a2345de3b9d66c40
SHA1
8d5f6bc8bd1ace8f01ec62b3f351936cab48fed2
SHA256
0ce5fbe89831fd11782cbaf9f116075ac2b718c4b717a3671483ec8b5a6c7b8e
SHA512
500433ee168cea979d14daed6b53fc06c724130604518affe549d2a1f6d042b4cf2c138d309cc148d1bd8f4c758fd832074d1cec029696a8222df15984e4fad4
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zQ:8QKotcTlBk9YwzEhPbYzjmMtccXk8KU
Checks for missing Authenticode signature.
resource |
---|
08bb0d07649a61b0a2345de3b9d66c40N |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ