PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
3c23c0ae359908c12ccdf1c3dbb4d16e08d92753d713e9477f5d25eb625bcdf3.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3c23c0ae359908c12ccdf1c3dbb4d16e08d92753d713e9477f5d25eb625bcdf3.dll
Resource
win10v2004-20240802-en
Target
3c23c0ae359908c12ccdf1c3dbb4d16e08d92753d713e9477f5d25eb625bcdf3
Size
3.5MB
MD5
cfb1b94d2e7ad49d9bc388d322ecb56e
SHA1
02c83135297ca605ab31cc21be7d5b7d8e006833
SHA256
3c23c0ae359908c12ccdf1c3dbb4d16e08d92753d713e9477f5d25eb625bcdf3
SHA512
41d7d0a12a9c0b42392cd2040a031c3a053f7633c55d7df17c8253d07209918231f1afec14651163d2a06d5c5101e32c7d60c1e974c3be956c6550ea1416ad7c
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zW:8QKotcTlBk9YwzEhPbYzjmMtccXk8KK
Checks for missing Authenticode signature.
resource |
---|
3c23c0ae359908c12ccdf1c3dbb4d16e08d92753d713e9477f5d25eb625bcdf3 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ