PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
b2b0b47cb89e5f18c7f9fda0191c2bf894525bbb37313ab5b1e4893c511b5751.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b2b0b47cb89e5f18c7f9fda0191c2bf894525bbb37313ab5b1e4893c511b5751.dll
Resource
win10v2004-20240802-en
Target
b2b0b47cb89e5f18c7f9fda0191c2bf894525bbb37313ab5b1e4893c511b5751
Size
3.5MB
MD5
ed9eef4563f5ec2cb347d3cf1c206b4c
SHA1
7b9583b107d473d330a859afbaf2dfb7ffac81ee
SHA256
b2b0b47cb89e5f18c7f9fda0191c2bf894525bbb37313ab5b1e4893c511b5751
SHA512
f6b64396ec0ba73af58756380da164deb4914156648dd84f17b448da95283e9156cda9c21dea8cc052fca1c5058dc443e7b0035e40f166b67308af6f98a79795
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zr:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kf
Checks for missing Authenticode signature.
resource |
---|
b2b0b47cb89e5f18c7f9fda0191c2bf894525bbb37313ab5b1e4893c511b5751 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ