PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
6656b6f1bebed41a49e412304591bd36541b22b663da0eab5fc7beca3257fa97.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6656b6f1bebed41a49e412304591bd36541b22b663da0eab5fc7beca3257fa97.dll
Resource
win10v2004-20240802-en
Target
6656b6f1bebed41a49e412304591bd36541b22b663da0eab5fc7beca3257fa97
Size
3.5MB
MD5
97a3871987ebaabf73b5cde94fecbfe1
SHA1
1f7cdf264b7cef3e160b45a7feb61ff8af8d6983
SHA256
6656b6f1bebed41a49e412304591bd36541b22b663da0eab5fc7beca3257fa97
SHA512
89a712e4771fd642a12c86a40252b3490ba1d4f61cf72d1f34f5c75b5185d7958d4d9f37ddc43d84bc9ce06320e81b5b304a0b55ee4bbd70b0f5f06423a3b16b
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zn:8QKotcTlBk9YwzEhPbYzjmMtccXk8KD
Checks for missing Authenticode signature.
resource |
---|
6656b6f1bebed41a49e412304591bd36541b22b663da0eab5fc7beca3257fa97 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ