PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
9db46b22d05a7d3332d3cfaf2b2130045d4c7559a112549d20d0032cc1e1337f.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9db46b22d05a7d3332d3cfaf2b2130045d4c7559a112549d20d0032cc1e1337f.dll
Resource
win10v2004-20240802-en
Target
9db46b22d05a7d3332d3cfaf2b2130045d4c7559a112549d20d0032cc1e1337f
Size
3.5MB
MD5
604c71e2123cb246f47e8e07f5e1b2df
SHA1
41248f95ef5d4c19e8d1b34ce583494bc153ad64
SHA256
9db46b22d05a7d3332d3cfaf2b2130045d4c7559a112549d20d0032cc1e1337f
SHA512
192bc217f28b53f6f779ee4d1f58458b0af57d9b9a9d5999c8e6a24eb5c37d23d3ea49ee1dd178247876c29848a9245243b16c0eaf2da1a1ba44ab9cab3b8abd
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zH:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kz
Checks for missing Authenticode signature.
resource |
---|
9db46b22d05a7d3332d3cfaf2b2130045d4c7559a112549d20d0032cc1e1337f |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ