PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
73adc6b9d357db29233553eadff3c1386008cce98bbce3667cca12994098e3f0.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
73adc6b9d357db29233553eadff3c1386008cce98bbce3667cca12994098e3f0.dll
Resource
win10v2004-20240802-en
Target
73adc6b9d357db29233553eadff3c1386008cce98bbce3667cca12994098e3f0
Size
3.5MB
MD5
9dec39eb0f5b503180c6dbcb391dfbe5
SHA1
9c81648e979208b9fc3656f34ab6613cdb12ff2c
SHA256
73adc6b9d357db29233553eadff3c1386008cce98bbce3667cca12994098e3f0
SHA512
b47d08a347a8cf0420610b69ac0249a6de891a2b176e03a3e72d523e3072189ded34cc68c0ce3ac5581ed74ffefe9570bc64ae941903ed7a8a7cf755b79074ac
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zI:8QKotcTlBk9YwzEhPbYzjmMtccXk8KE
Checks for missing Authenticode signature.
resource |
---|
73adc6b9d357db29233553eadff3c1386008cce98bbce3667cca12994098e3f0 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ