PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
ab2e384edd9456f32a717cd9b6c9d5719b6bf26ac44e2f33789859952cf47c1b.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ab2e384edd9456f32a717cd9b6c9d5719b6bf26ac44e2f33789859952cf47c1b.dll
Resource
win10v2004-20240802-en
Target
ab2e384edd9456f32a717cd9b6c9d5719b6bf26ac44e2f33789859952cf47c1b
Size
3.5MB
MD5
f6a05dd01378af5c158ea86049655d13
SHA1
8bf197bbc05d00ac192275e107228a363e9bcdbd
SHA256
ab2e384edd9456f32a717cd9b6c9d5719b6bf26ac44e2f33789859952cf47c1b
SHA512
7b8dfc4c2f2e77f485986ab7b57553b1c1a15aebaeeb4a3d9e7472f8510c9c06ca9a7528718024708539462b5faa07daa4fb9d00acd8e24a1e7b340e88b460c9
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+ze:8QKotcTlBk9YwzEhPbYzjmMtccXk8KS
Checks for missing Authenticode signature.
resource |
---|
ab2e384edd9456f32a717cd9b6c9d5719b6bf26ac44e2f33789859952cf47c1b |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ