PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
64c238ed7db90cd462d98370a2ea73de4e7e0e3b475a19a8fa69a7f64c5833d4.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
64c238ed7db90cd462d98370a2ea73de4e7e0e3b475a19a8fa69a7f64c5833d4.dll
Resource
win10v2004-20240802-en
Target
64c238ed7db90cd462d98370a2ea73de4e7e0e3b475a19a8fa69a7f64c5833d4
Size
3.5MB
MD5
796058f7095f962cb04a504619e2fc2a
SHA1
cc7cd8018b6a3d189cbbab87b16041eef8a9cbfd
SHA256
64c238ed7db90cd462d98370a2ea73de4e7e0e3b475a19a8fa69a7f64c5833d4
SHA512
1fecc4f734b1d322d1a34ba9cc927302d2a29c79e55545a9dff93a1ccd4565c5e51c9070ae4ef2dd7f970a56691a111d1cdb49463832f8ed5cdf0af8f878860d
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+z+:8QKotcTlBk9YwzEhPbYzjmMtccXk8KK
Checks for missing Authenticode signature.
resource |
---|
64c238ed7db90cd462d98370a2ea73de4e7e0e3b475a19a8fa69a7f64c5833d4 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ