PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
b458ffc1577375bcb6ccac53a62f0636752b34cac6fd838825bafb72ef8290b0.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b458ffc1577375bcb6ccac53a62f0636752b34cac6fd838825bafb72ef8290b0.dll
Resource
win10v2004-20240802-en
Target
b458ffc1577375bcb6ccac53a62f0636752b34cac6fd838825bafb72ef8290b0
Size
3.5MB
MD5
7d54e8aabba82867d98f2b0b0257a907
SHA1
e93a72f7619919d4891f073ac22ddc4091946f53
SHA256
b458ffc1577375bcb6ccac53a62f0636752b34cac6fd838825bafb72ef8290b0
SHA512
ec55da43b61c9a0036b3446ece8f68b81c74f8dd88d029c68b544cb88bc5977d472fc495ec5c56c7f38cdf2b475da69a38171cc6926640946f15f4f8ec2c9981
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+z5:8QKotcTlBk9YwzEhPbYzjmMtccXk8K9
Checks for missing Authenticode signature.
resource |
---|
b458ffc1577375bcb6ccac53a62f0636752b34cac6fd838825bafb72ef8290b0 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ