PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
a34b894767aa899e058e51294390111f93a4c768bceed8bb938c38d4519121fb.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a34b894767aa899e058e51294390111f93a4c768bceed8bb938c38d4519121fb.dll
Resource
win10v2004-20240802-en
Target
a34b894767aa899e058e51294390111f93a4c768bceed8bb938c38d4519121fb
Size
3.5MB
MD5
2f73642cf1dd19bfd16b9633e3bd0e2e
SHA1
6c3b0015456ce0ed86ab7a96a5cb6de018ce0f97
SHA256
a34b894767aa899e058e51294390111f93a4c768bceed8bb938c38d4519121fb
SHA512
936e04cf93192e255fdbe5558f5bfe879cce67b5c26a7732945e6fcd226b1b3afb58ef2dd5945d21040e95ee26ab49a6045b03a785ddcf4a8dff53b6cdae454a
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zM:8QKotcTlBk9YwzEhPbYzjmMtccXk8KI
Checks for missing Authenticode signature.
resource |
---|
a34b894767aa899e058e51294390111f93a4c768bceed8bb938c38d4519121fb |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ