PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
ac1f9e901c5ee813447253aba3fa5d8e9264b9adcc17fd84c91cf39053a4b26f.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ac1f9e901c5ee813447253aba3fa5d8e9264b9adcc17fd84c91cf39053a4b26f.dll
Resource
win10v2004-20240802-en
Target
ac1f9e901c5ee813447253aba3fa5d8e9264b9adcc17fd84c91cf39053a4b26f
Size
3.5MB
MD5
f71ac187a63fa635b05e46449bdeeb1f
SHA1
b75c6f96985443ae085faee4044b1f0c096c56ec
SHA256
ac1f9e901c5ee813447253aba3fa5d8e9264b9adcc17fd84c91cf39053a4b26f
SHA512
eccd2f4b1aeae0976215b6f2a2976437ce30413c6ddf47919859f7b1df7a707a28bf2e9ccb6901a0859ce4a1bee642e4a2648a8983d13998b908677433a3ceb0
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zx:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kl
Checks for missing Authenticode signature.
resource |
---|
ac1f9e901c5ee813447253aba3fa5d8e9264b9adcc17fd84c91cf39053a4b26f |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ