PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
08307f1a7378ecd70e0e667130098aa6802862dccd18ff94ad4fba480356c781.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
08307f1a7378ecd70e0e667130098aa6802862dccd18ff94ad4fba480356c781.dll
Resource
win10v2004-20240802-en
Target
08307f1a7378ecd70e0e667130098aa6802862dccd18ff94ad4fba480356c781
Size
3.5MB
MD5
a4c1185e83bf7f1ad39179f4c1742763
SHA1
d0a8f306ffeb7296bb5a108cd7785e259c5e3267
SHA256
08307f1a7378ecd70e0e667130098aa6802862dccd18ff94ad4fba480356c781
SHA512
979dd5d4634557c8d802fcfdefb1c37df1a89ab97ea03ca8bb6697c779a1df47ea95d516dc762796b9ba09ee32960d95014eefe2f9737a246a47c7d5e39ade70
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zr:8QKotcTlBk9YwzEhPbYzjmMtccXk8K3
Checks for missing Authenticode signature.
resource |
---|
08307f1a7378ecd70e0e667130098aa6802862dccd18ff94ad4fba480356c781 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ