PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
efc58f41a91b7d11881e813e9e4deff6e63ea7f32bc5a0b14885fc347d524256.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
efc58f41a91b7d11881e813e9e4deff6e63ea7f32bc5a0b14885fc347d524256.dll
Resource
win10v2004-20240802-en
Target
efc58f41a91b7d11881e813e9e4deff6e63ea7f32bc5a0b14885fc347d524256
Size
3.5MB
MD5
090c497cfad7a23144f56ea40919703a
SHA1
6cb0a1137f4de2062bf9e02caa90195204acdf9d
SHA256
efc58f41a91b7d11881e813e9e4deff6e63ea7f32bc5a0b14885fc347d524256
SHA512
66b86c9dda502b08afb1c5cff6b04d2e70d59195105ca5c537ea5b26aef3b9f79f057e4a06a016a243a5979b3cf0ca1456dc1ffad44d77152249fec839b4a6ea
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+za:8QKotcTlBk9YwzEhPbYzjmMtccXk8Km
Checks for missing Authenticode signature.
resource |
---|
efc58f41a91b7d11881e813e9e4deff6e63ea7f32bc5a0b14885fc347d524256 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ