PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
cdf9ae5eb64e7de7eb520d22c83f840469b4207cde579e4564d8f950d4dcc233.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
cdf9ae5eb64e7de7eb520d22c83f840469b4207cde579e4564d8f950d4dcc233.dll
Resource
win10v2004-20240802-en
Target
cdf9ae5eb64e7de7eb520d22c83f840469b4207cde579e4564d8f950d4dcc233
Size
3.5MB
MD5
d2c79fe270ede40f0455b5b93ef5b6fc
SHA1
9088339dcc2ed7724aaaa050153898bca7affbaa
SHA256
cdf9ae5eb64e7de7eb520d22c83f840469b4207cde579e4564d8f950d4dcc233
SHA512
177ce5425dce28acb5b4c27ff862f07201497d42ffa7997c1dd0f1ae94d073c8f27ccbd82dc60bd47b14f789bd01d0eb5d1cf1c222c5578b5604876827addd6f
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zy:8QKotcTlBk9YwzEhPbYzjmMtccXk8Ke
Checks for missing Authenticode signature.
resource |
---|
cdf9ae5eb64e7de7eb520d22c83f840469b4207cde579e4564d8f950d4dcc233 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ