PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
62ee287b88e1cc250e505d58f6d07591dac7b2c1a3e8186b27b7c59aa7b15b44.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
62ee287b88e1cc250e505d58f6d07591dac7b2c1a3e8186b27b7c59aa7b15b44.dll
Resource
win10v2004-20240802-en
Target
62ee287b88e1cc250e505d58f6d07591dac7b2c1a3e8186b27b7c59aa7b15b44
Size
3.5MB
MD5
b3c2978260a353d8056eb43f5289af76
SHA1
32051071af9f16d36d4403ba9777c555f0c5a32f
SHA256
62ee287b88e1cc250e505d58f6d07591dac7b2c1a3e8186b27b7c59aa7b15b44
SHA512
6744a2b55677085fb98ea9675732483499392637f5ffdd927b43428789c42ded9b2a36c27aadba83c8df0a59abf4829332022d6b7bcdcd49f905a8220bf75a13
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zh:8QKotcTlBk9YwzEhPbYzjmMtccXk8KN
Checks for missing Authenticode signature.
resource |
---|
62ee287b88e1cc250e505d58f6d07591dac7b2c1a3e8186b27b7c59aa7b15b44 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ