PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
d9e5d33435ec7a7c95dced044636528dcc384fcb151dfdce1ee5f3f7d93d06d8.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d9e5d33435ec7a7c95dced044636528dcc384fcb151dfdce1ee5f3f7d93d06d8.dll
Resource
win10v2004-20240802-en
Target
d9e5d33435ec7a7c95dced044636528dcc384fcb151dfdce1ee5f3f7d93d06d8
Size
3.5MB
MD5
df689765fad6fdef88bb720028397142
SHA1
1e9804622547a5f9427f18232d697f9051dfeb8f
SHA256
d9e5d33435ec7a7c95dced044636528dcc384fcb151dfdce1ee5f3f7d93d06d8
SHA512
8d94c6a8bd621fcf001d898a071825f9805d613841862f430d70ae0f64fef1521bbfc5497928fd085c10420840836ca1bb56bdca1afadd782cc76f04445b8518
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zf:8QKotcTlBk9YwzEhPbYzjmMtccXk8KD
Checks for missing Authenticode signature.
resource |
---|
d9e5d33435ec7a7c95dced044636528dcc384fcb151dfdce1ee5f3f7d93d06d8 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ