PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
fdbe22783271d4fc60b50ca6cfa87750d0be1739ddd7e54f897e2b374634bfa5.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fdbe22783271d4fc60b50ca6cfa87750d0be1739ddd7e54f897e2b374634bfa5.dll
Resource
win10v2004-20240802-en
Target
fdbe22783271d4fc60b50ca6cfa87750d0be1739ddd7e54f897e2b374634bfa5
Size
3.5MB
MD5
08f4ab118ce4453b6852444856f9b5e9
SHA1
c07f1776e42e330a22f936725328fae898cd8d69
SHA256
fdbe22783271d4fc60b50ca6cfa87750d0be1739ddd7e54f897e2b374634bfa5
SHA512
29fd691a79f9614404180b54391856ae5afae1c2f2c272cc1c91ff31e587958d4e1fe8ae366e973605aff8bd37743e674b596d772cb8ba6a539b53d268f72a26
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zh:8QKotcTlBk9YwzEhPbYzjmMtccXk8K9
Checks for missing Authenticode signature.
resource |
---|
fdbe22783271d4fc60b50ca6cfa87750d0be1739ddd7e54f897e2b374634bfa5 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ