PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
3d3584d05271fe228f9ee7b37f3dc180N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3d3584d05271fe228f9ee7b37f3dc180N.dll
Resource
win10v2004-20240802-en
Target
3d3584d05271fe228f9ee7b37f3dc180N
Size
3.5MB
MD5
3d3584d05271fe228f9ee7b37f3dc180
SHA1
d10cb0083de223177e7c918122ff19b890cddf00
SHA256
9c6ff881a91720845f963283d86a91bf696461f402edbfe96d1cc8c984b4108e
SHA512
f13b10ffd33453738e59d5ab9764f4605c6549c380f4cc4b9204629b1a913eae3109bd2a4f77092bd7ca379adcb19a6ce313c01160066c78fbec2e24af16c412
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zr:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kn
Checks for missing Authenticode signature.
resource |
---|
3d3584d05271fe228f9ee7b37f3dc180N |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ