PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
4c9026e5a77dbc1187e808d98792c23189fc5ca0da4f704765d2277ba8d88b8d.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4c9026e5a77dbc1187e808d98792c23189fc5ca0da4f704765d2277ba8d88b8d.dll
Resource
win10v2004-20240802-en
Target
4c9026e5a77dbc1187e808d98792c23189fc5ca0da4f704765d2277ba8d88b8d
Size
3.5MB
MD5
b3ae545d880a9df8ca1b75b96bb84495
SHA1
25230175605ebf1738d1e6c7c5dada55389a035b
SHA256
4c9026e5a77dbc1187e808d98792c23189fc5ca0da4f704765d2277ba8d88b8d
SHA512
abe1709a0e2dbe296de2e581d99657d5fe58ad7fb2079b1f233702ab7a20d6e0bbec5da3e7d8d5a8bfb3d84d3fcd6b2722eb719962b4780d706ee8b3500f7cf9
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+z2:8QKotcTlBk9YwzEhPbYzjmMtccXk8K6
Checks for missing Authenticode signature.
resource |
---|
4c9026e5a77dbc1187e808d98792c23189fc5ca0da4f704765d2277ba8d88b8d |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ