PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
2a6ac8ff4494e590ad9c3c7fd6f0397ae609cf9859e3423b3175b2bfbbc0c105.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2a6ac8ff4494e590ad9c3c7fd6f0397ae609cf9859e3423b3175b2bfbbc0c105.dll
Resource
win10v2004-20240802-en
Target
2a6ac8ff4494e590ad9c3c7fd6f0397ae609cf9859e3423b3175b2bfbbc0c105
Size
3.5MB
MD5
da7a44f24dfc33d6452e33d8fbdbe2bf
SHA1
faefafe66cf350eb526c5acb17b2d04f9c97adc0
SHA256
2a6ac8ff4494e590ad9c3c7fd6f0397ae609cf9859e3423b3175b2bfbbc0c105
SHA512
4b67928817b74fdede885f872cce96281810a51430083d228d9ee0c6cc89f8f8c919bd933831f40b6b324c82165351b2d88025238b8a4dc7aa0590f8d38b1896
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+z4:8QKotcTlBk9YwzEhPbYzjmMtccXk8K0
Checks for missing Authenticode signature.
resource |
---|
2a6ac8ff4494e590ad9c3c7fd6f0397ae609cf9859e3423b3175b2bfbbc0c105 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ