PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
7b19cd06e749d562455e01aa5b5258d98f7763077a1f5263b264338b9829e811.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
7b19cd06e749d562455e01aa5b5258d98f7763077a1f5263b264338b9829e811.dll
Resource
win10v2004-20240802-en
Target
7b19cd06e749d562455e01aa5b5258d98f7763077a1f5263b264338b9829e811
Size
3.5MB
MD5
39788f8a5a9d72a296205c3968d15a55
SHA1
2cf5c1e86c545694ef2eebda78bb0d1f2fa25ec6
SHA256
7b19cd06e749d562455e01aa5b5258d98f7763077a1f5263b264338b9829e811
SHA512
7cd11cfd84bf1a05ce553f465f2185b64492ddce8ce118b9c99c49bd9d0ff50318984d6b5ff7de65fcb2685df91e23e7c3581d5b798817f0438411c4b3aa9823
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zX:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kr
Checks for missing Authenticode signature.
resource |
---|
7b19cd06e749d562455e01aa5b5258d98f7763077a1f5263b264338b9829e811 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ