PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
06d352a3366ff2773aad16718cc5ded6912e3c59f0bceeb50218d2520de042f2.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
06d352a3366ff2773aad16718cc5ded6912e3c59f0bceeb50218d2520de042f2.dll
Resource
win10v2004-20240802-en
Target
06d352a3366ff2773aad16718cc5ded6912e3c59f0bceeb50218d2520de042f2
Size
3.5MB
MD5
be8c15819f6e7c370a576a1bc7c675f5
SHA1
66aff8cda56377b55d21bb227a70e65ab7d3d732
SHA256
06d352a3366ff2773aad16718cc5ded6912e3c59f0bceeb50218d2520de042f2
SHA512
9527b009cc05d5e0dc329bfb72d2ce364ae7d846c048ea1f9acb1eb155dfbc8d740f777cdea6a001ff4909ad41d939933b2f7f416d9073959658d7a06f555bfc
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zC:8QKotcTlBk9YwzEhPbYzjmMtccXk8K2
Checks for missing Authenticode signature.
resource |
---|
06d352a3366ff2773aad16718cc5ded6912e3c59f0bceeb50218d2520de042f2 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ