PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
19a65fd592739df2f3b93c5a6bde4e8e5f49da4b0353123c96c26d4f3681071d.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
19a65fd592739df2f3b93c5a6bde4e8e5f49da4b0353123c96c26d4f3681071d.dll
Resource
win10v2004-20240802-en
Target
19a65fd592739df2f3b93c5a6bde4e8e5f49da4b0353123c96c26d4f3681071d
Size
3.5MB
MD5
e1738302d2749cc3253f0b07f35f51df
SHA1
cbdf2692ad212ee34e02bf52863fe7fe076c9723
SHA256
19a65fd592739df2f3b93c5a6bde4e8e5f49da4b0353123c96c26d4f3681071d
SHA512
906ca6846ac146b4f6b1ad43fdb82068fe00217c7c33db2962d60350d4e487f57921a58e2bab7e796d4345ba96556300df30c4b9235b73e13c5a6d6ca8606252
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+z3:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kj
Checks for missing Authenticode signature.
resource |
---|
19a65fd592739df2f3b93c5a6bde4e8e5f49da4b0353123c96c26d4f3681071d |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ