PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
78f8a3ac9264c8a6f6e431b79440f260N.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
78f8a3ac9264c8a6f6e431b79440f260N.dll
Resource
win10v2004-20240910-en
Target
78f8a3ac9264c8a6f6e431b79440f260N
Size
3.5MB
MD5
78f8a3ac9264c8a6f6e431b79440f260
SHA1
19a21781377fbd00618132ab3f5e9ce939a35080
SHA256
3bc036c56ea3ce7c4e4c72b6a9b4e3bec517b09b2673b02780a4bfaa6322032f
SHA512
2a2600f752db7a23d6addd9796340bb5c99907c3413654e7b1169e61f03031e6cc89d04b0a5f60588f2a31666b25f2656fd721da5a85fd0e6bd46633bf7b6542
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zp:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kd
Checks for missing Authenticode signature.
resource |
---|
78f8a3ac9264c8a6f6e431b79440f260N |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ