PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
f2208e6a60955c9afc4e256d92b7f4cf59c76a7775bdd0e0a509d7aa713aaaea.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f2208e6a60955c9afc4e256d92b7f4cf59c76a7775bdd0e0a509d7aa713aaaea.dll
Resource
win10v2004-20240802-en
Target
f2208e6a60955c9afc4e256d92b7f4cf59c76a7775bdd0e0a509d7aa713aaaea
Size
4.6MB
MD5
e439225f9b2ddb4cc7d30abbe66c9c74
SHA1
15f2a5b39c3c9ff366fb0b1e2f117bb46a389220
SHA256
f2208e6a60955c9afc4e256d92b7f4cf59c76a7775bdd0e0a509d7aa713aaaea
SHA512
8bc53bd90f7fdb4945d322a5e7fe64af9e4fca0c445f2be695c26931534efd876dc0be7d578d71a446154fd148573d121d401baef7d0547b357a7be7bb003c9b
SSDEEP
98304:8QKotcTlBk9YwzEhPbYzjmMtccXk8KMXTz9xehCtD3/wRMi9vzYWg:8QKQGG9KPUnmMtccXf/X/9XNoz9bbg
Checks for missing Authenticode signature.
resource |
---|
f2208e6a60955c9afc4e256d92b7f4cf59c76a7775bdd0e0a509d7aa713aaaea |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ