PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
6768201417db44ca46f5b7f4f1d58a961c5126080ae78951e5d4615c0190ba63.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6768201417db44ca46f5b7f4f1d58a961c5126080ae78951e5d4615c0190ba63.dll
Resource
win10v2004-20240802-en
Target
6768201417db44ca46f5b7f4f1d58a961c5126080ae78951e5d4615c0190ba63
Size
3.5MB
MD5
e1a731b3b8c26c4ca9e2d963b2640cc9
SHA1
d2f4e28c8da6ff367df52d9a6b6cfc14347b178f
SHA256
6768201417db44ca46f5b7f4f1d58a961c5126080ae78951e5d4615c0190ba63
SHA512
261f4a3d6b777edbafde9d52d4f8233a925f6a2b972c6bbd5e39355e9725d405cdfdd94abb6f88932fe2018fefa0afbcd43e8eded13b7622a781f04170dc3e64
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zG:8QKotcTlBk9YwzEhPbYzjmMtccXk8KS
Checks for missing Authenticode signature.
resource |
---|
6768201417db44ca46f5b7f4f1d58a961c5126080ae78951e5d4615c0190ba63 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ