PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
f6f5e0e2a7fa318a197ef14c8269451c0bc2e8b142f0d0029c793436537f81ab.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f6f5e0e2a7fa318a197ef14c8269451c0bc2e8b142f0d0029c793436537f81ab.dll
Resource
win10v2004-20240802-en
Target
f6f5e0e2a7fa318a197ef14c8269451c0bc2e8b142f0d0029c793436537f81ab
Size
3.5MB
MD5
da6be49aafe3e04197241fc3c3f096ca
SHA1
87c18596827b0b4fe90327bbf8f30cac80ca3cd4
SHA256
f6f5e0e2a7fa318a197ef14c8269451c0bc2e8b142f0d0029c793436537f81ab
SHA512
d26e1c5697a4545528c582cff3081cec32e725b372cb06c39290d077d5d1eaaa3fb590722e1449c2815daf2c0ddd3d89a8e34dd8f0fdb154873784e6c106c12c
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zF:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kx
Checks for missing Authenticode signature.
resource |
---|
f6f5e0e2a7fa318a197ef14c8269451c0bc2e8b142f0d0029c793436537f81ab |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ