PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
04b134e3e3ff2aa6a565ba3ab07e83165ff9a8c5eae4c0b03e8e24a135308389.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
04b134e3e3ff2aa6a565ba3ab07e83165ff9a8c5eae4c0b03e8e24a135308389.dll
Resource
win10v2004-20240802-en
Target
04b134e3e3ff2aa6a565ba3ab07e83165ff9a8c5eae4c0b03e8e24a135308389
Size
4.5MB
MD5
962330d7cd20bd4f540b8490ae9b38b7
SHA1
ad67662cac0d7d080f0ac697befd8f9c97f405b7
SHA256
04b134e3e3ff2aa6a565ba3ab07e83165ff9a8c5eae4c0b03e8e24a135308389
SHA512
c58bf7e0ead3aef39f176db33d5bb86a74bfa228c02d84e8dc372704abcec6b10cb76d31b0a4867dfacb5369989bd41cc1ab492b37d8cd997f04c083f8e3fde4
SSDEEP
98304:GqQHp5qEGiFp2i8Qe7KoO/TrXZ/llWnX4wzXhJjemq+TWh7tHOka:Gpp5qDiFAUBlyX4wThs7Y
Checks for missing Authenticode signature.
resource |
---|
04b134e3e3ff2aa6a565ba3ab07e83165ff9a8c5eae4c0b03e8e24a135308389 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ