PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
d631edbec3b5e02fa999f1d9238c917e3fbf6e6a37106109ab67c56085c9a560.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d631edbec3b5e02fa999f1d9238c917e3fbf6e6a37106109ab67c56085c9a560.dll
Resource
win10v2004-20240802-en
Target
d631edbec3b5e02fa999f1d9238c917e3fbf6e6a37106109ab67c56085c9a560
Size
3.5MB
MD5
0f1a30200b75fa428d961a895f8dc368
SHA1
ca830bcef2742328c56d71dbf1e7f2470c9fb0c4
SHA256
d631edbec3b5e02fa999f1d9238c917e3fbf6e6a37106109ab67c56085c9a560
SHA512
aef91adc38607b2e6adcfd2642cecbb1816619a0624a3e6cae6160461407f2b1072186627ff3f604d9dc002f347ab1944c31150e777af461eac4169d3b43a523
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zC:8QKotcTlBk9YwzEhPbYzjmMtccXk8KO
Checks for missing Authenticode signature.
resource |
---|
d631edbec3b5e02fa999f1d9238c917e3fbf6e6a37106109ab67c56085c9a560 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ