PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
65b20bfae276c1f38358618776eb655bd89a3ae7efd6694a39b5f2da5e902f7a.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
65b20bfae276c1f38358618776eb655bd89a3ae7efd6694a39b5f2da5e902f7a.dll
Resource
win10v2004-20240802-en
Target
65b20bfae276c1f38358618776eb655bd89a3ae7efd6694a39b5f2da5e902f7a
Size
3.5MB
MD5
e8b25de9aaf2c76784898ba302f1a7cc
SHA1
ef4760235a5bf3c587d91135a1a2c8c3c43e6b09
SHA256
65b20bfae276c1f38358618776eb655bd89a3ae7efd6694a39b5f2da5e902f7a
SHA512
b84b70d1f0d8eb0111c379f0e7ed3c0a7af7bf269945be8c877208c97897c8dd7e2e13064d51fb5bf67b6c7add09ac7b37b2076206b6dcc6ac6b6b1018eaf0a6
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zP:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kb
Checks for missing Authenticode signature.
resource |
---|
65b20bfae276c1f38358618776eb655bd89a3ae7efd6694a39b5f2da5e902f7a |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ