PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
f1f8469a24f513f497f49d3fa30626a5c4e3bb0a388ea3de7943e89a091d2090.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f1f8469a24f513f497f49d3fa30626a5c4e3bb0a388ea3de7943e89a091d2090.dll
Resource
win10v2004-20240802-en
Target
f1f8469a24f513f497f49d3fa30626a5c4e3bb0a388ea3de7943e89a091d2090
Size
3.5MB
MD5
41ade66e498ffa05c828a456cea01706
SHA1
d17dc2ebe4aa849d3301e9a403c876f801a6ba1d
SHA256
f1f8469a24f513f497f49d3fa30626a5c4e3bb0a388ea3de7943e89a091d2090
SHA512
8dbb657abd2c5958d70d8a81393907ff7da4c53d37bb736fea4a77354dddc4e8b4c9425e247357e5410d2a8557cc0bddb1a0c4097c95baa8afbe56e4143fc4a5
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zy:8QKotcTlBk9YwzEhPbYzjmMtccXk8K+
Checks for missing Authenticode signature.
resource |
---|
f1f8469a24f513f497f49d3fa30626a5c4e3bb0a388ea3de7943e89a091d2090 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ