PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
c4614bce34144e6ab0904951b780d7d0N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c4614bce34144e6ab0904951b780d7d0N.dll
Resource
win10v2004-20240802-en
Target
c4614bce34144e6ab0904951b780d7d0N
Size
3.5MB
MD5
c4614bce34144e6ab0904951b780d7d0
SHA1
2570204b316fa6834c381f57170cf6a4d88150aa
SHA256
9977896e94f42b12314d5a5a55145e8e1c7927e43a2effb44a1577a5d81ad3a2
SHA512
58b376edeb0c61c32d38019daabdd95ee4f7e4cd0977c2eaadbed65d188ac4c794e2debe04652d84d5a1d26ca0a89eacfee520c9fe8e542f0c446ffe697a925a
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zQ:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kc
Checks for missing Authenticode signature.
resource |
---|
c4614bce34144e6ab0904951b780d7d0N |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ