PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
c3b3d771c7b9d366116c6d9d4f2f027d46a5d7e6af4878a230ebd9fdadbb51e3.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c3b3d771c7b9d366116c6d9d4f2f027d46a5d7e6af4878a230ebd9fdadbb51e3.dll
Resource
win10v2004-20240802-en
Target
c3b3d771c7b9d366116c6d9d4f2f027d46a5d7e6af4878a230ebd9fdadbb51e3
Size
3.5MB
MD5
9ddf5ac2805e07840856b8d1530c813a
SHA1
42c70fa644b4f6b80b9d3caa96dec1301fa9adb0
SHA256
c3b3d771c7b9d366116c6d9d4f2f027d46a5d7e6af4878a230ebd9fdadbb51e3
SHA512
69ba6c8e3f2d7727cdea9123bd6568683c4dd759a7f40c3378fc1f8a2c0bbeb1fcf056393ff25adb9c3c9dbbe97397cde9edbb4f5b22102ee6cd02938f53f06b
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zc:8QKotcTlBk9YwzEhPbYzjmMtccXk8KA
Checks for missing Authenticode signature.
resource |
---|
c3b3d771c7b9d366116c6d9d4f2f027d46a5d7e6af4878a230ebd9fdadbb51e3 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ