PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
304423fe260cae3ea99e3bd4ec72caad3e7065b596ded7c6fda33c3d8e1d8ec8.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
304423fe260cae3ea99e3bd4ec72caad3e7065b596ded7c6fda33c3d8e1d8ec8.dll
Resource
win10v2004-20240802-en
Target
304423fe260cae3ea99e3bd4ec72caad3e7065b596ded7c6fda33c3d8e1d8ec8
Size
3.5MB
MD5
11c873c4a7d818a1afdcd3d5d1d0391a
SHA1
c4754785ff9da9400e96b4299b059568579c46a3
SHA256
304423fe260cae3ea99e3bd4ec72caad3e7065b596ded7c6fda33c3d8e1d8ec8
SHA512
7f4e6771a0df2e59339d7eb51f2071942910cd5e17a10a6521ac92e735712efe2a62f42d8efb24b75bc920fa17bce733cc4af42ffd9bbc07f6fae6d88852a471
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+z8:8QKotcTlBk9YwzEhPbYzjmMtccXk8KY
Checks for missing Authenticode signature.
resource |
---|
304423fe260cae3ea99e3bd4ec72caad3e7065b596ded7c6fda33c3d8e1d8ec8 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ