PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
244fa080e4be7a20603ee8dcfd1cfd2f2d5250917d14d8d42a0ff6416af43f51.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
244fa080e4be7a20603ee8dcfd1cfd2f2d5250917d14d8d42a0ff6416af43f51.dll
Resource
win10v2004-20240802-en
Target
244fa080e4be7a20603ee8dcfd1cfd2f2d5250917d14d8d42a0ff6416af43f51
Size
3.5MB
MD5
499eef5c9c87b9345b91d6e62c8cffaa
SHA1
0e6f51f3bd31b54bec096450cf6fb5275daf5970
SHA256
244fa080e4be7a20603ee8dcfd1cfd2f2d5250917d14d8d42a0ff6416af43f51
SHA512
be30f00071b6cf48dcd1ff4f21518592a05985f5b1e5140ad9cfb9a5972fad47cc78e147c1db1160b30deae59ff7cecca58052e49f74218553c751c2123babfd
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+z3:8QKotcTlBk9YwzEhPbYzjmMtccXk8KT
Checks for missing Authenticode signature.
resource |
---|
244fa080e4be7a20603ee8dcfd1cfd2f2d5250917d14d8d42a0ff6416af43f51 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ