PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
30a751b52c51de5dedf368be15d37293fd30d611c2aac3ee0b6bbd3fb05ba146.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
30a751b52c51de5dedf368be15d37293fd30d611c2aac3ee0b6bbd3fb05ba146.dll
Resource
win10v2004-20240802-en
Target
30a751b52c51de5dedf368be15d37293fd30d611c2aac3ee0b6bbd3fb05ba146
Size
3.5MB
MD5
cc85d641531930a1400544af9576aa77
SHA1
831a69849265f7843bb5448ee86c3d45453a6257
SHA256
30a751b52c51de5dedf368be15d37293fd30d611c2aac3ee0b6bbd3fb05ba146
SHA512
f60c9d7be60d01129d9040f0dbc4374a94f24dd7e7e02cf551daa1366c06a97dd32069c50562261f7d8da805d95a42f46ddd6656e70ebb1d37e298d340b6f480
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zU:8QKotcTlBk9YwzEhPbYzjmMtccXk8KQ
Checks for missing Authenticode signature.
resource |
---|
30a751b52c51de5dedf368be15d37293fd30d611c2aac3ee0b6bbd3fb05ba146 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ