PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
a0b03bad0fd7e5f1ef0262394a4ecf6f5e4ad0110c65a04efd4b3d91635ccd23.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a0b03bad0fd7e5f1ef0262394a4ecf6f5e4ad0110c65a04efd4b3d91635ccd23.dll
Resource
win10v2004-20240802-en
Target
a0b03bad0fd7e5f1ef0262394a4ecf6f5e4ad0110c65a04efd4b3d91635ccd23
Size
3.5MB
MD5
bafda78de22ab2c97515afde7582de04
SHA1
038c18fa5d48dac3e25d64a2623a8d39d3255dfd
SHA256
a0b03bad0fd7e5f1ef0262394a4ecf6f5e4ad0110c65a04efd4b3d91635ccd23
SHA512
39067abf60f2deba09f373764f07906113bd17dffdfc117509032dc597521f2acadf0ab2054f52620aa54fb2ac7a38fb52faacbae1cac3b7e83c19437e45c252
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zv:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kj
Checks for missing Authenticode signature.
resource |
---|
a0b03bad0fd7e5f1ef0262394a4ecf6f5e4ad0110c65a04efd4b3d91635ccd23 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ