PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
01c8733d723ae242c8852fe1dd3592ba81f2adaafdc32b3cebee92a572725912.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
01c8733d723ae242c8852fe1dd3592ba81f2adaafdc32b3cebee92a572725912.dll
Resource
win10v2004-20240802-en
Target
01c8733d723ae242c8852fe1dd3592ba81f2adaafdc32b3cebee92a572725912
Size
3.5MB
MD5
a8ff027d8c46d8e648445050f97bf027
SHA1
92d1137037918585dc39a867275fa822b8d17509
SHA256
01c8733d723ae242c8852fe1dd3592ba81f2adaafdc32b3cebee92a572725912
SHA512
5c1505cb8b723665a84e8e4a67d9bfcb605626fb0bfc22a8c2c2c982b586caaa052faee54ea927c08c83716171717a7333770bdd17eb347cc48c6b92da1de2e3
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+z5:8QKotcTlBk9YwzEhPbYzjmMtccXk8KN
Checks for missing Authenticode signature.
resource |
---|
01c8733d723ae242c8852fe1dd3592ba81f2adaafdc32b3cebee92a572725912 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ