PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
bfd7e4ddc1f43e540d4564a74f53b789ed80f49f52e21644a553a9db20d0bdf2.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bfd7e4ddc1f43e540d4564a74f53b789ed80f49f52e21644a553a9db20d0bdf2.dll
Resource
win10v2004-20240802-en
Target
bfd7e4ddc1f43e540d4564a74f53b789ed80f49f52e21644a553a9db20d0bdf2
Size
3.5MB
MD5
ff406d34a4b8460e1abdeb69985dec2b
SHA1
d5e0580a9fa6601c66eac9d9a9a8287879bd29de
SHA256
bfd7e4ddc1f43e540d4564a74f53b789ed80f49f52e21644a553a9db20d0bdf2
SHA512
576ce88c54e53486403c735d439ddcf602e2331bc4da5e83a019e12e488ff2908eb6597b14702e4021aaa691025ed2fcb8f802c5d91edc3ff07352d7c8ccd65e
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zx:8QKotcTlBk9YwzEhPbYzjmMtccXk8K1
Checks for missing Authenticode signature.
resource |
---|
bfd7e4ddc1f43e540d4564a74f53b789ed80f49f52e21644a553a9db20d0bdf2 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ