PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
b33d1d6f8983292d2f39e1ae7399a76e8733dd41fcefaa649447b823688f3233.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b33d1d6f8983292d2f39e1ae7399a76e8733dd41fcefaa649447b823688f3233.dll
Resource
win10v2004-20240802-en
Target
b33d1d6f8983292d2f39e1ae7399a76e8733dd41fcefaa649447b823688f3233
Size
3.5MB
MD5
51169208af31085191af4617fd5622cc
SHA1
70ab0fb7c80be1326abe0aa34033984571bdad85
SHA256
b33d1d6f8983292d2f39e1ae7399a76e8733dd41fcefaa649447b823688f3233
SHA512
c219a96ccbce7c542021011a8456185c6c1995d0551f5d631c0710e62786f65363b1e0ce3e57e404c3f697c93e5bf6de588c1c9f4d11b9ace299008fa3d26365
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+z3:8QKotcTlBk9YwzEhPbYzjmMtccXk8KD
Checks for missing Authenticode signature.
resource |
---|
b33d1d6f8983292d2f39e1ae7399a76e8733dd41fcefaa649447b823688f3233 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ