PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
8441db39d193836c63931913e1250cbdba7f9e4af4b112bac803bc6042104355.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8441db39d193836c63931913e1250cbdba7f9e4af4b112bac803bc6042104355.dll
Resource
win10v2004-20240802-en
Target
8441db39d193836c63931913e1250cbdba7f9e4af4b112bac803bc6042104355
Size
3.5MB
MD5
1edaae867207f64d109e79edfc117660
SHA1
1e0b6579dc23c33cc5d0397962233c25ac484799
SHA256
8441db39d193836c63931913e1250cbdba7f9e4af4b112bac803bc6042104355
SHA512
01163587a661af1f10c2979aa6ef00e4896accb3b03ad490fe11463121fa1e17eaeb3b46f431f91572a5e7a3472d9196beb06f84aaae85c5c9eb44559c3f0524
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+za:8QKotcTlBk9YwzEhPbYzjmMtccXk8K+
Checks for missing Authenticode signature.
resource |
---|
8441db39d193836c63931913e1250cbdba7f9e4af4b112bac803bc6042104355 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ