PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
d4b8c7d76e26829c8274b4de42805869f2d00ffd2cd876771af53d47d43051aa.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d4b8c7d76e26829c8274b4de42805869f2d00ffd2cd876771af53d47d43051aa.dll
Resource
win10v2004-20240802-en
Target
d4b8c7d76e26829c8274b4de42805869f2d00ffd2cd876771af53d47d43051aa
Size
3.5MB
MD5
c8d09ba3b02cb1d9f61c27632bcad123
SHA1
7c547ed9044227b5ce0f54981296a72c5c90a6a9
SHA256
d4b8c7d76e26829c8274b4de42805869f2d00ffd2cd876771af53d47d43051aa
SHA512
96586f140b39ca5923ca5e7fbf432ad8df8791cf643b42c956e7d7df4cdd1a2e8f0a40e4aa3603e3e1a8756837b86bf1c40c8c43ba0a8f1c1e1ea6a677eb8cf3
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zH:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kj
Checks for missing Authenticode signature.
resource |
---|
d4b8c7d76e26829c8274b4de42805869f2d00ffd2cd876771af53d47d43051aa |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ