PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
0e784b65863dcb9338e5fc0c03da401fb0e1627353014d49c0b4beb1c168a429.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0e784b65863dcb9338e5fc0c03da401fb0e1627353014d49c0b4beb1c168a429.dll
Resource
win10v2004-20240802-en
Target
0e784b65863dcb9338e5fc0c03da401fb0e1627353014d49c0b4beb1c168a429
Size
3.5MB
MD5
92748db84bca8aaab6e26ce2e21ff4d7
SHA1
1c6fa0119ad1ea402979282426b79f24d1a29d14
SHA256
0e784b65863dcb9338e5fc0c03da401fb0e1627353014d49c0b4beb1c168a429
SHA512
392b76f8921f75c38263f22eaacce3385096927306d285e1ab40c67f6fc2b39de15c010fe1d07a3d67c94973943880f79834238d9612d6d7e390b93cb5cfaa91
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+z3:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kj
Checks for missing Authenticode signature.
resource |
---|
0e784b65863dcb9338e5fc0c03da401fb0e1627353014d49c0b4beb1c168a429 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ