PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
6e27f45fb330b8c90d9d69e9340c2a7762c2676a75493eb18507f026ca1120c5.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6e27f45fb330b8c90d9d69e9340c2a7762c2676a75493eb18507f026ca1120c5.dll
Resource
win10v2004-20240802-en
Target
6e27f45fb330b8c90d9d69e9340c2a7762c2676a75493eb18507f026ca1120c5
Size
3.5MB
MD5
e4743136f28d5e14d3dc126bdc331ecf
SHA1
97be89d4200f2959054ac17b43d13e5c34106565
SHA256
6e27f45fb330b8c90d9d69e9340c2a7762c2676a75493eb18507f026ca1120c5
SHA512
b980c31b4e787e951ed87f990bf81b0f8e22b5bcc2cb0a39f25b207b44cc60157fec7b758349efcacd6a2fb01f106b3c1e26fffffde87ae5f94c33c89aaddfb2
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zR:8QKotcTlBk9YwzEhPbYzjmMtccXk8KF
Checks for missing Authenticode signature.
resource |
---|
6e27f45fb330b8c90d9d69e9340c2a7762c2676a75493eb18507f026ca1120c5 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ