PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
b2da076be19484d96ea9932192a561511ddfc1fd807963f6edb6cf4dd723482a.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b2da076be19484d96ea9932192a561511ddfc1fd807963f6edb6cf4dd723482a.dll
Resource
win10v2004-20240802-en
Target
b2da076be19484d96ea9932192a561511ddfc1fd807963f6edb6cf4dd723482a
Size
3.5MB
MD5
8cb7b3352b2fbf94fca363cc321dbc88
SHA1
0995f3681ecde69acfb80d5ec4efe52a37c8939f
SHA256
b2da076be19484d96ea9932192a561511ddfc1fd807963f6edb6cf4dd723482a
SHA512
0791d187694d41242348c34890227919b07dd3ea2d6691cbdca64bfdbe7b9fc771e4f028de71ef092b0d008729417aca3b80a670d2fd9f1a37e5e81a6e055873
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zA:8QKotcTlBk9YwzEhPbYzjmMtccXk8KM
Checks for missing Authenticode signature.
resource |
---|
b2da076be19484d96ea9932192a561511ddfc1fd807963f6edb6cf4dd723482a |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ