PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
48bef27efd05c00e13f384f8c99f8adccb196b75b3c9ab6eb1c9147496a62b93.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
48bef27efd05c00e13f384f8c99f8adccb196b75b3c9ab6eb1c9147496a62b93.dll
Resource
win10v2004-20240802-en
Target
48bef27efd05c00e13f384f8c99f8adccb196b75b3c9ab6eb1c9147496a62b93
Size
3.5MB
MD5
3cbbd233331261737b89f32d4212bb16
SHA1
748c5431e080009e22c3bbab7fcb6cbbaf94c8eb
SHA256
48bef27efd05c00e13f384f8c99f8adccb196b75b3c9ab6eb1c9147496a62b93
SHA512
0c5f86d306762ed83cdb3c1db8c5029612d77a5c4ef3a3332eb309239661e4bf849b1b21f6783c234f74cc60a9e427c245eb0b80054bc4411adb6c6a69a2606d
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zf:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kj
Checks for missing Authenticode signature.
resource |
---|
48bef27efd05c00e13f384f8c99f8adccb196b75b3c9ab6eb1c9147496a62b93 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ