PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
f057d08bb80a1b90347c147bdd7b2ca8918b2f5a773eb0c9d3b0c2dc7ef23250.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f057d08bb80a1b90347c147bdd7b2ca8918b2f5a773eb0c9d3b0c2dc7ef23250.dll
Resource
win10v2004-20240802-en
Target
f057d08bb80a1b90347c147bdd7b2ca8918b2f5a773eb0c9d3b0c2dc7ef23250
Size
3.5MB
MD5
16c14bb5a9315fa732280e9f9c81a0d4
SHA1
1a087ee0e2a5a3b406a6dc3ae24e787f1eb189fd
SHA256
f057d08bb80a1b90347c147bdd7b2ca8918b2f5a773eb0c9d3b0c2dc7ef23250
SHA512
78257e3c05ae512169ba5919a85ed84d7a9b7492b599c9029414771de74b3593a90f6230e78e8d7051abe137e1bec90c501c14530c5994274ff8e56057c2b03f
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zJ:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kd
Checks for missing Authenticode signature.
resource |
---|
f057d08bb80a1b90347c147bdd7b2ca8918b2f5a773eb0c9d3b0c2dc7ef23250 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ