PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
fbd9a0bfe5554ce52f42530aed064e003e2ed49027ec5c611f272b47745089ea.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fbd9a0bfe5554ce52f42530aed064e003e2ed49027ec5c611f272b47745089ea.dll
Resource
win10v2004-20240802-en
Target
fbd9a0bfe5554ce52f42530aed064e003e2ed49027ec5c611f272b47745089ea
Size
3.5MB
MD5
e4a5143659176d9cd5716f65a83907dc
SHA1
95ea28b938acdf2357057bff4fd964e9345a628d
SHA256
fbd9a0bfe5554ce52f42530aed064e003e2ed49027ec5c611f272b47745089ea
SHA512
f82ff278fc15e096caedd333916b898683142d9a23abc71fbadb2ab1dff3ff849855e51437c414be1f30da3a3545517a7795211e99de8de64b7dd1a1694c3c02
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+z7:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kn
Checks for missing Authenticode signature.
resource |
---|
fbd9a0bfe5554ce52f42530aed064e003e2ed49027ec5c611f272b47745089ea |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ