PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
4963a402fe300439b714d82320aa086664a632120137a701d4f5050eb5028952.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4963a402fe300439b714d82320aa086664a632120137a701d4f5050eb5028952.dll
Resource
win10v2004-20240802-en
Target
4963a402fe300439b714d82320aa086664a632120137a701d4f5050eb5028952
Size
3.5MB
MD5
0cd066891f0c716ecf9bacc8aae475c4
SHA1
c2aef5a3f58b7ba814931d99f8ada294cd67b64c
SHA256
4963a402fe300439b714d82320aa086664a632120137a701d4f5050eb5028952
SHA512
49fc32e97dc97a8234f52a657483a7c996097d8251cb81572889966dee8f1a15178767bdb14679a24333e3634ef32c532b9350b3586886bf3240f829870827c8
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zp:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kd
Checks for missing Authenticode signature.
resource |
---|
4963a402fe300439b714d82320aa086664a632120137a701d4f5050eb5028952 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ