PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
5f6a83a9c75ecfeeedfafd34628319a0N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5f6a83a9c75ecfeeedfafd34628319a0N.dll
Resource
win10v2004-20240802-en
Target
5f6a83a9c75ecfeeedfafd34628319a0N
Size
3.5MB
MD5
5f6a83a9c75ecfeeedfafd34628319a0
SHA1
98dd44ea6471fb02ce1bec3d6c8b48c27347c547
SHA256
1cf75a0c48ee62bb18bef35075fa3881de5cec899f9d8bfd9d90fd8ab8a48db0
SHA512
40eb410839f59aff8305495923f0686c118ebf1837f67b6406a65b020533a8e1f09c2645c9a7574b9dc850d332a5a26e250ef44fbbc85d16cd32d43bc5a01cd5
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+ze:8QKotcTlBk9YwzEhPbYzjmMtccXk8KC
Checks for missing Authenticode signature.
resource |
---|
5f6a83a9c75ecfeeedfafd34628319a0N |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ