PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
31a50f64820f232a09d290968b71957628f28e582d2f890c6f10695ebeb7ccb0.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
31a50f64820f232a09d290968b71957628f28e582d2f890c6f10695ebeb7ccb0.dll
Resource
win10v2004-20240802-en
Target
31a50f64820f232a09d290968b71957628f28e582d2f890c6f10695ebeb7ccb0
Size
3.5MB
MD5
b0610a7b3d36554e18a26335b928ccb8
SHA1
8ca2458fad24238554d880d22c3aad58dc840ee2
SHA256
31a50f64820f232a09d290968b71957628f28e582d2f890c6f10695ebeb7ccb0
SHA512
f4e15cd301c23b3398cf2e5457b90a04eaa1ee53533a680dbf86920ba34259e303509519f932636697baacfd001ee909c01106468aa889ce3a27306208bab3d8
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zG:8QKotcTlBk9YwzEhPbYzjmMtccXk8Ki
Checks for missing Authenticode signature.
resource |
---|
31a50f64820f232a09d290968b71957628f28e582d2f890c6f10695ebeb7ccb0 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ