PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
0bf1982fcbdb48935318f389096406ba942b4997fb603d327b4a15afea6c8eca.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0bf1982fcbdb48935318f389096406ba942b4997fb603d327b4a15afea6c8eca.dll
Resource
win10v2004-20240802-en
Target
0bf1982fcbdb48935318f389096406ba942b4997fb603d327b4a15afea6c8eca
Size
3.5MB
MD5
5f227c293942d354f070d9ad09d2f477
SHA1
2e4a550d4027182ace00636445f7dbe6cea97561
SHA256
0bf1982fcbdb48935318f389096406ba942b4997fb603d327b4a15afea6c8eca
SHA512
e373ce5d8ea8d7505508c43608e503b4277d8774df413f9d0f796aefc18511591ce9c544f00e345e06a481f04c7cc003c2903e6fc44c5c55f534072ab9d7d57e
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zR:8QKotcTlBk9YwzEhPbYzjmMtccXk8KF
Checks for missing Authenticode signature.
resource |
---|
0bf1982fcbdb48935318f389096406ba942b4997fb603d327b4a15afea6c8eca |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ