PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
f91c46421fe3278048ce1b2e21567787bef9603aadf05ddf382c4c73a1ec1543.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f91c46421fe3278048ce1b2e21567787bef9603aadf05ddf382c4c73a1ec1543.dll
Resource
win10v2004-20240802-en
Target
f91c46421fe3278048ce1b2e21567787bef9603aadf05ddf382c4c73a1ec1543
Size
3.5MB
MD5
d0958f4f5cfd73edd6a00f28a069c5c7
SHA1
169fc27a7b4e5ffca3b70140aa0de0e1fb4f95f1
SHA256
f91c46421fe3278048ce1b2e21567787bef9603aadf05ddf382c4c73a1ec1543
SHA512
9aacf71bc57ff4c908b11ac63b1159b1267f5a10fb19f45edea6cc9ef275e3f8f9ad6b0fa9c2df0def6682ab01caeb200cc38bec80c443cfa33656f4b9910e23
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zC:8QKotcTlBk9YwzEhPbYzjmMtccXk8Ku
Checks for missing Authenticode signature.
resource |
---|
f91c46421fe3278048ce1b2e21567787bef9603aadf05ddf382c4c73a1ec1543 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ