PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
ce2bef8f3a26325cd45fbc1a6acccdf8cfc3529bcc203fc95d1f9b8aadf69ce6.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce2bef8f3a26325cd45fbc1a6acccdf8cfc3529bcc203fc95d1f9b8aadf69ce6.dll
Resource
win10v2004-20240802-en
Target
ce2bef8f3a26325cd45fbc1a6acccdf8cfc3529bcc203fc95d1f9b8aadf69ce6
Size
3.5MB
MD5
5e86ce86c4ffc4b56e993a51f0a29d49
SHA1
8508b9c5b1ad84d203e8c9e5af9677cf0b8f0dfd
SHA256
ce2bef8f3a26325cd45fbc1a6acccdf8cfc3529bcc203fc95d1f9b8aadf69ce6
SHA512
33866508d5d055b3afb1d4c8a55d20bfcdcd30b874fab5072599d2c983d2a74d8a351b65af27e9e4606abc5917048318d571fe238e336fdb0922071be8005907
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+z4:8QKotcTlBk9YwzEhPbYzjmMtccXk8KU
Checks for missing Authenticode signature.
resource |
---|
ce2bef8f3a26325cd45fbc1a6acccdf8cfc3529bcc203fc95d1f9b8aadf69ce6 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ