PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
6acf004380165d55e1d77f4dd67ba135c02b74417f8e8fa969bcee682a737429.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6acf004380165d55e1d77f4dd67ba135c02b74417f8e8fa969bcee682a737429.dll
Resource
win10v2004-20240802-en
Target
6acf004380165d55e1d77f4dd67ba135c02b74417f8e8fa969bcee682a737429
Size
3.5MB
MD5
1ceee1e4487cb98ee6302dffc186cf8a
SHA1
a8efa73102b30ad7a78a5e1f78c647882d7f4a3c
SHA256
6acf004380165d55e1d77f4dd67ba135c02b74417f8e8fa969bcee682a737429
SHA512
ee766dc8063c251601b75808395b8593646e0a29d58f919f6f237263136183060704935e73793e32f595d0b243ff8c9e3ac365a3f79074a9ae5854dd09ac8858
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zW:8QKotcTlBk9YwzEhPbYzjmMtccXk8KK
Checks for missing Authenticode signature.
resource |
---|
6acf004380165d55e1d77f4dd67ba135c02b74417f8e8fa969bcee682a737429 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ