PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
e107a9a8296eb03650499f49c567abb2f4e4b2c39a7c444dd5e5fbf8f4a66616.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e107a9a8296eb03650499f49c567abb2f4e4b2c39a7c444dd5e5fbf8f4a66616.dll
Resource
win10v2004-20240802-en
Target
e107a9a8296eb03650499f49c567abb2f4e4b2c39a7c444dd5e5fbf8f4a66616
Size
3.5MB
MD5
39945c259fac0ae15e7d9963634e4bf6
SHA1
208a62d31bad3206ebab334a3d4ba4469a83ae4d
SHA256
e107a9a8296eb03650499f49c567abb2f4e4b2c39a7c444dd5e5fbf8f4a66616
SHA512
110e6153f805c16463e2f3e6e214a46258211905d7a42a14a71b4c136a97a8ca8f104953b1ac7ffddefa6d887da01761fe03d49aa797c3fc2c3b99c15ae803a0
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zX:8QKotcTlBk9YwzEhPbYzjmMtccXk8K7
Checks for missing Authenticode signature.
resource |
---|
e107a9a8296eb03650499f49c567abb2f4e4b2c39a7c444dd5e5fbf8f4a66616 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ