PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
1c2f9033c3e2934a0407394f5a0f4e87bfde444a6da4d296eeb4874caae8fdf6.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
1c2f9033c3e2934a0407394f5a0f4e87bfde444a6da4d296eeb4874caae8fdf6.dll
Resource
win10v2004-20240802-en
Target
1c2f9033c3e2934a0407394f5a0f4e87bfde444a6da4d296eeb4874caae8fdf6
Size
3.5MB
MD5
b09a31eed2aa87159ec9f1704aa01c5d
SHA1
26c7a2595f34956200ec617d140dbfc4520eae2f
SHA256
1c2f9033c3e2934a0407394f5a0f4e87bfde444a6da4d296eeb4874caae8fdf6
SHA512
52bf6c160b6bcbcbc18273b641cea06b76e29306bcf8f5285c445523d99b931eed288defda642a34a1f11c1d56b8b00a27648c64541af5e55d1530d8f47825f8
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+z3:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kz
Checks for missing Authenticode signature.
resource |
---|
1c2f9033c3e2934a0407394f5a0f4e87bfde444a6da4d296eeb4874caae8fdf6 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ