PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
ac88509940a5a7cb2cb397696d841855647924fc7f3c8c8324560ee222a50e9b.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ac88509940a5a7cb2cb397696d841855647924fc7f3c8c8324560ee222a50e9b.dll
Resource
win10v2004-20240802-en
Target
ac88509940a5a7cb2cb397696d841855647924fc7f3c8c8324560ee222a50e9b
Size
3.5MB
MD5
31c9abacee8108a8910f84a147e75f5e
SHA1
691d439e5aa47c3685ad66d655ae54f3b995f7ae
SHA256
ac88509940a5a7cb2cb397696d841855647924fc7f3c8c8324560ee222a50e9b
SHA512
2effffce9572d8a91e02eddb5c54c03ddcbf0477b50af8a10a73a949082b2d1d71a1869b448de59a8949471f1347e61ec2b48ec08abe17e535e607eeccf9d5c3
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+z9:8QKotcTlBk9YwzEhPbYzjmMtccXk8K5
Checks for missing Authenticode signature.
resource |
---|
ac88509940a5a7cb2cb397696d841855647924fc7f3c8c8324560ee222a50e9b |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ