PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
b2c14df64765840c76f243211ffca2002e53cdf8ab190a7f1b5ce49294d55da9.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b2c14df64765840c76f243211ffca2002e53cdf8ab190a7f1b5ce49294d55da9.dll
Resource
win10v2004-20240802-en
Target
b2c14df64765840c76f243211ffca2002e53cdf8ab190a7f1b5ce49294d55da9
Size
3.5MB
MD5
1250b974c674c9caa5992caa7e8c9489
SHA1
7e2ef75a285dae834f0a3a1f64aee030e71260b8
SHA256
b2c14df64765840c76f243211ffca2002e53cdf8ab190a7f1b5ce49294d55da9
SHA512
e83164af646c2e5b69557a82d35fa3dbcdaa021f0cb6846b0a0fafb5bdb65aaa77555d21d43e36379f062343b2b83cc97cbbe84f228f5f3f5c2c73ff862d214e
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zS:8QKotcTlBk9YwzEhPbYzjmMtccXk8KO
Checks for missing Authenticode signature.
resource |
---|
b2c14df64765840c76f243211ffca2002e53cdf8ab190a7f1b5ce49294d55da9 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ