PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
f3ff68737ead6beedbf283ca7b369c057e4856f68bd27a0fc87d980f4feeb1fc.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f3ff68737ead6beedbf283ca7b369c057e4856f68bd27a0fc87d980f4feeb1fc.dll
Resource
win10v2004-20240802-en
Target
f3ff68737ead6beedbf283ca7b369c057e4856f68bd27a0fc87d980f4feeb1fc
Size
3.5MB
MD5
dfe7e957b024a7936d9249f8f47331df
SHA1
fb933698b8acadd12f440522232d52d51cd01fd4
SHA256
f3ff68737ead6beedbf283ca7b369c057e4856f68bd27a0fc87d980f4feeb1fc
SHA512
afc6249862eb7bbbaa6626152508adbfec76bc03327177b4615658a9523637b0e645955ecabe9c1b6c2efd73c19618f49a537a6756488d4d07d164adaa1c880b
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zm:8QKotcTlBk9YwzEhPbYzjmMtccXk8K6
Checks for missing Authenticode signature.
resource |
---|
f3ff68737ead6beedbf283ca7b369c057e4856f68bd27a0fc87d980f4feeb1fc |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ