PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
68949f745133f7fdceb715b2eb53093328dae89e206f943e6c92bec8a0a89a9b.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
68949f745133f7fdceb715b2eb53093328dae89e206f943e6c92bec8a0a89a9b.dll
Resource
win10v2004-20240802-en
Target
68949f745133f7fdceb715b2eb53093328dae89e206f943e6c92bec8a0a89a9b
Size
3.5MB
MD5
e61a8d8e03d73089fc2687b676ce6268
SHA1
dc8c3b44e5f4200da03b1917ad3ebb3131c030ad
SHA256
68949f745133f7fdceb715b2eb53093328dae89e206f943e6c92bec8a0a89a9b
SHA512
e49717b939103bd097e3edd8af1b57a19a70b9b8a66e634584e13a41ae197b650bab06b2b63a0afe265c56eb57c07c9b64c3af80902fa30c75f368cb51f90eca
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zb:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kn
Checks for missing Authenticode signature.
resource |
---|
68949f745133f7fdceb715b2eb53093328dae89e206f943e6c92bec8a0a89a9b |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ