PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
8983c85961df7601423e669b774ab82309e6390598a2c7f9d22ff6a03be1719c.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8983c85961df7601423e669b774ab82309e6390598a2c7f9d22ff6a03be1719c.dll
Resource
win10v2004-20240802-en
Target
8983c85961df7601423e669b774ab82309e6390598a2c7f9d22ff6a03be1719c
Size
3.5MB
MD5
4b7f2e995a765d7b3b4716665c934bf5
SHA1
e53ac5cecb9570420debfc662b61ca671269b3d2
SHA256
8983c85961df7601423e669b774ab82309e6390598a2c7f9d22ff6a03be1719c
SHA512
36c9cd7180310b00a9d390f203af4d725052730ad137887d08501e45023c91af1226c08c425a585dc212594dfc9f0030614edf6c539fec7d5f2429b4175a07ce
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zj:8QKotcTlBk9YwzEhPbYzjmMtccXk8K/
Checks for missing Authenticode signature.
resource |
---|
8983c85961df7601423e669b774ab82309e6390598a2c7f9d22ff6a03be1719c |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ