PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
9f3731a1082910ba60b1b69af5bddc885a261396ee4e6d8d5486fe165b246b41.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
9f3731a1082910ba60b1b69af5bddc885a261396ee4e6d8d5486fe165b246b41.dll
Resource
win10v2004-20240802-en
Target
9f3731a1082910ba60b1b69af5bddc885a261396ee4e6d8d5486fe165b246b41
Size
3.5MB
MD5
7a5adf17146f35a7f006a8ec10d0a583
SHA1
579de0d3ee863f94af3e927256bf9dec0998cd1b
SHA256
9f3731a1082910ba60b1b69af5bddc885a261396ee4e6d8d5486fe165b246b41
SHA512
619156658298f8beeec6ecf99fca7df373ab1d6d713b0f3da475c71aaec146d5531ca6cfa86055c5c441060c9c505c00466882f3018c1c0f797c49aebae64f5c
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zK:8QKotcTlBk9YwzEhPbYzjmMtccXk8K+
Checks for missing Authenticode signature.
resource |
---|
9f3731a1082910ba60b1b69af5bddc885a261396ee4e6d8d5486fe165b246b41 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ