PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
72daa95072fd55c7374a8e1d191b72d6bc7667571975f09de4faa997270e93a3.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
72daa95072fd55c7374a8e1d191b72d6bc7667571975f09de4faa997270e93a3.dll
Resource
win10v2004-20240802-en
Target
72daa95072fd55c7374a8e1d191b72d6bc7667571975f09de4faa997270e93a3
Size
3.5MB
MD5
a74fc6335b9770efe9c0763e99baa697
SHA1
9c70591fd3bd115e7768ff50d34b0ae8470bebff
SHA256
72daa95072fd55c7374a8e1d191b72d6bc7667571975f09de4faa997270e93a3
SHA512
c0da0ac6df6e1654245d82c7c06108be6ab2ba036a90a5237806de2df14f8cc7bb826986ae98f834e03dea7a4dc8cd04f328cedb6251753a3758ad21fd0ea3a2
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zj:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kv
Checks for missing Authenticode signature.
resource |
---|
72daa95072fd55c7374a8e1d191b72d6bc7667571975f09de4faa997270e93a3 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ