PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
e003d2ee001860cf92ea9bdd395f4cb6c2bf38e5df79f5398257be5d36c8aea9.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e003d2ee001860cf92ea9bdd395f4cb6c2bf38e5df79f5398257be5d36c8aea9.dll
Resource
win10v2004-20240802-en
Target
e003d2ee001860cf92ea9bdd395f4cb6c2bf38e5df79f5398257be5d36c8aea9
Size
3.5MB
MD5
77111ac7a78a1f8c9c316cb76953ad62
SHA1
3560a3a63e1d9751bc8cec0b10fb90a859203fa9
SHA256
e003d2ee001860cf92ea9bdd395f4cb6c2bf38e5df79f5398257be5d36c8aea9
SHA512
77f0e4c554d5aeb9ccbd89b9b9bcfa31a96ad1c63b1d2d348e51b9e9dec45f977db2186c355534388802d3be363f392e63be31dac7374c0116c107c38dc61183
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zq:8QKotcTlBk9YwzEhPbYzjmMtccXk8Ku
Checks for missing Authenticode signature.
resource |
---|
e003d2ee001860cf92ea9bdd395f4cb6c2bf38e5df79f5398257be5d36c8aea9 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ