PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
c48f0831f02e1219844cddf886880cc2f60535899e786b2f12a675d3478b18ee.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c48f0831f02e1219844cddf886880cc2f60535899e786b2f12a675d3478b18ee.dll
Resource
win10v2004-20240802-en
Target
c48f0831f02e1219844cddf886880cc2f60535899e786b2f12a675d3478b18ee
Size
3.5MB
MD5
cc74729f5293f11eda5fb91394edabcf
SHA1
cf68cd41cedbef6b536cc319736d5a9c9abcfbbe
SHA256
c48f0831f02e1219844cddf886880cc2f60535899e786b2f12a675d3478b18ee
SHA512
9ddbbafd7cbed44ce41204c38e93acc4c9c11dd86bb666a627550d31f343bf0c93548de6453d693445f4c454a1825e3695d4b92b7bc79ca6b92eec932b858bf0
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zh:8QKotcTlBk9YwzEhPbYzjmMtccXk8KV
Checks for missing Authenticode signature.
resource |
---|
c48f0831f02e1219844cddf886880cc2f60535899e786b2f12a675d3478b18ee |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ