PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
75aa3e094cf68d1444506c9d209af24379e4212070fe987cf824c5f3c64c5370.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
75aa3e094cf68d1444506c9d209af24379e4212070fe987cf824c5f3c64c5370.dll
Resource
win10v2004-20240802-en
Target
75aa3e094cf68d1444506c9d209af24379e4212070fe987cf824c5f3c64c5370
Size
3.5MB
MD5
255d3a3694392e21632d0f061c1623a0
SHA1
3721565a7e2b3a47c18b7e6c2e231ce587163e59
SHA256
75aa3e094cf68d1444506c9d209af24379e4212070fe987cf824c5f3c64c5370
SHA512
364e1bb0bcc26b9ec37eac50f645bdd2ce899e8cf429347878e820d077a7272bd7d08462c02a520a6f6f033addc83031d92b28db4d009b7300fa97139b7f91ef
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zO:8QKotcTlBk9YwzEhPbYzjmMtccXk8KC
Checks for missing Authenticode signature.
resource |
---|
75aa3e094cf68d1444506c9d209af24379e4212070fe987cf824c5f3c64c5370 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ