PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
e71125d2b458bb27644b6fbe8a78db3100e84e8e6073a617b24314f695370b4b.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e71125d2b458bb27644b6fbe8a78db3100e84e8e6073a617b24314f695370b4b.dll
Resource
win10v2004-20240802-en
Target
e71125d2b458bb27644b6fbe8a78db3100e84e8e6073a617b24314f695370b4b
Size
3.5MB
MD5
e31af428fe25a2ed3aeffe7fc6286326
SHA1
0891af6886de9927f15f72f8990a4e44927ff09f
SHA256
e71125d2b458bb27644b6fbe8a78db3100e84e8e6073a617b24314f695370b4b
SHA512
52dd2e35c14e3b1c2d270ee3599f1483a8747b91cfc027713685311debc086d639b9b3b573ddf33e52f13c9033558b4f0a1809b0e1741988686f80dfb4439045
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zH:8QKotcTlBk9YwzEhPbYzjmMtccXk8KD
Checks for missing Authenticode signature.
resource |
---|
e71125d2b458bb27644b6fbe8a78db3100e84e8e6073a617b24314f695370b4b |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ