PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
fb7e2632115de37f6fc384b67c2b4b0b26cc6409c5239309390abeb61d0764af.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb7e2632115de37f6fc384b67c2b4b0b26cc6409c5239309390abeb61d0764af.dll
Resource
win10v2004-20240802-en
Target
fb7e2632115de37f6fc384b67c2b4b0b26cc6409c5239309390abeb61d0764af
Size
3.5MB
MD5
3f5f0f7df8f8ec0a9e456dc5f2c07f92
SHA1
081b7b480e35d9eed2e69fdbd8c5a04623a88f3a
SHA256
fb7e2632115de37f6fc384b67c2b4b0b26cc6409c5239309390abeb61d0764af
SHA512
6cd07bb5f35995c1781962015c047a9ef4a403c24154556533794223596f848b422b0b13b4a52ee19e8455117590c38ebd9a8fa7a68c6d7fc55473b9505054b0
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zp:8QKotcTlBk9YwzEhPbYzjmMtccXk8KV
Checks for missing Authenticode signature.
resource |
---|
fb7e2632115de37f6fc384b67c2b4b0b26cc6409c5239309390abeb61d0764af |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ