PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
8652bbe1db4ff596e046bbd083aa42ada05127ffd7016e49b6d2806d050baca2.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8652bbe1db4ff596e046bbd083aa42ada05127ffd7016e49b6d2806d050baca2.dll
Resource
win10v2004-20240802-en
Target
8652bbe1db4ff596e046bbd083aa42ada05127ffd7016e49b6d2806d050baca2
Size
3.5MB
MD5
4de3a3e4bb0e2451b11e885517da2c60
SHA1
69516e1c4f11f5155e3c2318a8b7f4d01d106888
SHA256
8652bbe1db4ff596e046bbd083aa42ada05127ffd7016e49b6d2806d050baca2
SHA512
a623f12206991fb49cc87c292a3d24979ca0303509bd13a6083c936b236a805a1e8127d144630f64ba3d8cc54377612f89b5d0f8043a63cb48e596653e237409
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zn:8QKotcTlBk9YwzEhPbYzjmMtccXk8KL
Checks for missing Authenticode signature.
resource |
---|
8652bbe1db4ff596e046bbd083aa42ada05127ffd7016e49b6d2806d050baca2 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ