PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
f581bbc5779c3b4cf88af0a7668ae30c3622da1eb3557d2d85bc20e7eb537292.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
f581bbc5779c3b4cf88af0a7668ae30c3622da1eb3557d2d85bc20e7eb537292.dll
Resource
win10v2004-20240802-en
Target
f581bbc5779c3b4cf88af0a7668ae30c3622da1eb3557d2d85bc20e7eb537292
Size
3.5MB
MD5
db9f108f0890c1a3cd8846770d4f740b
SHA1
35819f5a5f5af69e3132b2c0a20e75c331d58d60
SHA256
f581bbc5779c3b4cf88af0a7668ae30c3622da1eb3557d2d85bc20e7eb537292
SHA512
3bac2e27e3c6a08dabbe507e0b5d8bce6f5ec6b6c7d4a2664eff7bcd64def32683aefbf050eabc9bb6abd281fd6aca74a26f85adf08f91563533fc5d025af5dc
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zz:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kv
Checks for missing Authenticode signature.
resource |
---|
f581bbc5779c3b4cf88af0a7668ae30c3622da1eb3557d2d85bc20e7eb537292 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ