PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
e32a11a3f40f0c66af49aef6475dbc1e9a1e9a2d0a78872a555b1e60c57ebed8.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e32a11a3f40f0c66af49aef6475dbc1e9a1e9a2d0a78872a555b1e60c57ebed8.dll
Resource
win10v2004-20240802-en
Target
e32a11a3f40f0c66af49aef6475dbc1e9a1e9a2d0a78872a555b1e60c57ebed8
Size
3.5MB
MD5
9cf966cb0998b9419b3128947d7dff0d
SHA1
9e592a055f56e46de5ecacf146dc6fb8147145dc
SHA256
e32a11a3f40f0c66af49aef6475dbc1e9a1e9a2d0a78872a555b1e60c57ebed8
SHA512
1e075b8938ca302d2739a9ad3949a61d97c4d1bed5f199bb396d853fb8db56a4a1fe2280570cdb2fa56fcdfb853651ac3b449f8c1f0d11c775b688ca3a1c524d
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zk:8QKotcTlBk9YwzEhPbYzjmMtccXk8KQ
Checks for missing Authenticode signature.
resource |
---|
e32a11a3f40f0c66af49aef6475dbc1e9a1e9a2d0a78872a555b1e60c57ebed8 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ