PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
f6d921e78b0a9d027829750dcb9cd63cc455ddd1caf794b0d9708c807a1404ef.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
f6d921e78b0a9d027829750dcb9cd63cc455ddd1caf794b0d9708c807a1404ef.dll
Resource
win10v2004-20240802-en
Target
f6d921e78b0a9d027829750dcb9cd63cc455ddd1caf794b0d9708c807a1404ef
Size
3.5MB
MD5
53e0529ef2ce982fbb6e72404b8439ca
SHA1
b0f234e0de891f173bff0817d06070e326009117
SHA256
f6d921e78b0a9d027829750dcb9cd63cc455ddd1caf794b0d9708c807a1404ef
SHA512
b010e2912327ff071a6165960164bf1567a01a2acd89e92f1d06443bfcece9ad759a63395c570e40e3fd37864d958e86d4b6f2b6c38d0586b9c65583484f2e69
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zq:8QKotcTlBk9YwzEhPbYzjmMtccXk8Ke
Checks for missing Authenticode signature.
resource |
---|
f6d921e78b0a9d027829750dcb9cd63cc455ddd1caf794b0d9708c807a1404ef |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ