PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
559f8c33ddc808f781b4ef60da81c368b75450248cd8c0c029735daebf565325.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
559f8c33ddc808f781b4ef60da81c368b75450248cd8c0c029735daebf565325.dll
Resource
win10v2004-20240802-en
Target
559f8c33ddc808f781b4ef60da81c368b75450248cd8c0c029735daebf565325
Size
3.5MB
MD5
4e0daaadc834ac832191de09ce821496
SHA1
f3be38c4a123db632aba8e7f7468775c2a123903
SHA256
559f8c33ddc808f781b4ef60da81c368b75450248cd8c0c029735daebf565325
SHA512
2a0b7831d740782b2045a0c2a80172d7d78da2c699ccf30f95289227ddc47e7bd7eafac00d82cd51c18b1f1ac5e629b674768c6113b8ade03ca9a025fdf05fb7
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zK:8QKotcTlBk9YwzEhPbYzjmMtccXk8Ke
Checks for missing Authenticode signature.
resource |
---|
559f8c33ddc808f781b4ef60da81c368b75450248cd8c0c029735daebf565325 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ