PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
e0d609dfb2f17700145272a70552cdd8348f710ba502e006073057c522f35da8.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e0d609dfb2f17700145272a70552cdd8348f710ba502e006073057c522f35da8.dll
Resource
win10v2004-20240802-en
Target
e0d609dfb2f17700145272a70552cdd8348f710ba502e006073057c522f35da8
Size
3.5MB
MD5
e7596f71bee70fa5dfe64bfefef291ff
SHA1
0982c1fa30185ebc6e4c09c25bceaf10ad8ea071
SHA256
e0d609dfb2f17700145272a70552cdd8348f710ba502e006073057c522f35da8
SHA512
e1c39a5635721980b4c1c7728730b51d624cec9ba9597b06cc9a23fc9a0ffcc86f2956a5bcfb342a86eb91ce78ac2ca20348baca53b3d273d4adbd953d186d79
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zS:8QKotcTlBk9YwzEhPbYzjmMtccXk8KW
Checks for missing Authenticode signature.
resource |
---|
e0d609dfb2f17700145272a70552cdd8348f710ba502e006073057c522f35da8 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ