PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
18cb765711bec4ac70ebc85bc8f380be5aa798a8c9ec2957d9d517beeb15f969.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
18cb765711bec4ac70ebc85bc8f380be5aa798a8c9ec2957d9d517beeb15f969.dll
Resource
win10v2004-20240802-en
Target
18cb765711bec4ac70ebc85bc8f380be5aa798a8c9ec2957d9d517beeb15f969
Size
3.5MB
MD5
00c0ffebfcd470fe08f18306e03645fb
SHA1
5364c4f58f029b7df42f26d0ee4c2ed12f9ff1b6
SHA256
18cb765711bec4ac70ebc85bc8f380be5aa798a8c9ec2957d9d517beeb15f969
SHA512
2916a07025109c7d00815e9a9149c0fa7187da2dc5c330a0127d2c917fcc3150189b1715ab60199ecd83328c2dbf4a1676494e6cae6244e4a0d5f6232dfdddfd
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zf:8QKotcTlBk9YwzEhPbYzjmMtccXk8KT
Checks for missing Authenticode signature.
resource |
---|
18cb765711bec4ac70ebc85bc8f380be5aa798a8c9ec2957d9d517beeb15f969 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ