PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
ac876097271528640a94b68e52757e406d154d3a2cfffb8105ab2b8328737bef.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ac876097271528640a94b68e52757e406d154d3a2cfffb8105ab2b8328737bef.dll
Resource
win10v2004-20240802-en
Target
ac876097271528640a94b68e52757e406d154d3a2cfffb8105ab2b8328737bef
Size
3.5MB
MD5
a44292c5246e47abb1aad0fd5e0e2ef5
SHA1
739ddce3de7fc791cf881544ad9f6c681352e738
SHA256
ac876097271528640a94b68e52757e406d154d3a2cfffb8105ab2b8328737bef
SHA512
e1d364c0d0485ceb3b324155361698b72205a21dcb1606389d1e3a78dfae14dce74c9608eb4caefa5b014e7b264435ad2fdb8a44af203c4490725c6af0c18433
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zV:8QKotcTlBk9YwzEhPbYzjmMtccXk8KR
Checks for missing Authenticode signature.
resource |
---|
ac876097271528640a94b68e52757e406d154d3a2cfffb8105ab2b8328737bef |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ