PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
8e210f74cc01eda39c7ec488b224eda3616e658c6d3cf7b4a8b55244685e43f0.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8e210f74cc01eda39c7ec488b224eda3616e658c6d3cf7b4a8b55244685e43f0.dll
Resource
win10v2004-20240802-en
Target
8e210f74cc01eda39c7ec488b224eda3616e658c6d3cf7b4a8b55244685e43f0
Size
3.5MB
MD5
fc0144a78090220cbb9ff31dafe2ef84
SHA1
4a1ea69e680e241d8a561995d93342e186fb5d87
SHA256
8e210f74cc01eda39c7ec488b224eda3616e658c6d3cf7b4a8b55244685e43f0
SHA512
ae8e2cbb98b531a0474007f2174791bfa4c9e799b95a95074321ea83eee3c9218485526e31cfa918a57d19ade9ee923dc3ac275af61ea6f58772e4dc5708a1b8
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+z3:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kz
Checks for missing Authenticode signature.
resource |
---|
8e210f74cc01eda39c7ec488b224eda3616e658c6d3cf7b4a8b55244685e43f0 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ