PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
0ef4f87d4a891b812212e1c9a3be252b4521a17ccdac73b23080032234803d22.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0ef4f87d4a891b812212e1c9a3be252b4521a17ccdac73b23080032234803d22.dll
Resource
win10v2004-20240802-en
Target
0ef4f87d4a891b812212e1c9a3be252b4521a17ccdac73b23080032234803d22
Size
3.5MB
MD5
47f03504618616b4b9242a6885b13059
SHA1
e8c8b19b4bc77aba5d90cb04ffb7f5a466e0eb02
SHA256
0ef4f87d4a891b812212e1c9a3be252b4521a17ccdac73b23080032234803d22
SHA512
d7a3198c9e1db4d11b80390f5b9dde60bc656057634f5e4a08d05553ce85c707233d2de309f96a02e6fb063d6ff08c223dcd6cfcfe294e53c9ad6175167c81ec
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zM:8QKotcTlBk9YwzEhPbYzjmMtccXk8KY
Checks for missing Authenticode signature.
resource |
---|
0ef4f87d4a891b812212e1c9a3be252b4521a17ccdac73b23080032234803d22 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ