PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
bf062561663879190a38d44e0cdd033123ec709062fe4b36e6154f29cd05f892.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bf062561663879190a38d44e0cdd033123ec709062fe4b36e6154f29cd05f892.dll
Resource
win10v2004-20240802-en
Target
bf062561663879190a38d44e0cdd033123ec709062fe4b36e6154f29cd05f892
Size
3.5MB
MD5
e9d6f7540e7e222eae548c3eef6e4298
SHA1
839c56d223d1db116e9855451397af5cda1d7d53
SHA256
bf062561663879190a38d44e0cdd033123ec709062fe4b36e6154f29cd05f892
SHA512
7c0e37f1b02fa930307dcafdac2850d87a2b49fedf97fb83a25876b3f9690fb5490a6162d505f9df6c6723a0de9f746aab1daf6f355d326dd34d138d2c0479b6
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+z9:8QKotcTlBk9YwzEhPbYzjmMtccXk8KZ
Checks for missing Authenticode signature.
resource |
---|
bf062561663879190a38d44e0cdd033123ec709062fe4b36e6154f29cd05f892 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ