PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
4d20d37d58acfcce32a30a1a4f96c49642a837a8d2bae7dc883ba7442286bca3.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4d20d37d58acfcce32a30a1a4f96c49642a837a8d2bae7dc883ba7442286bca3.dll
Resource
win10v2004-20240802-en
Target
4d20d37d58acfcce32a30a1a4f96c49642a837a8d2bae7dc883ba7442286bca3
Size
3.5MB
MD5
d6e5fc077717a04e2e405aed4ac2137b
SHA1
d3a1ddd34af2db7c12d7ed9ef4c27fcd6a3900ed
SHA256
4d20d37d58acfcce32a30a1a4f96c49642a837a8d2bae7dc883ba7442286bca3
SHA512
e888162b86186aa6cbd59b46afa5ad40277d913353ceadd32383208bd23cddda39f0ef395c73fa137f05a479f5a77ffbb3ae665172e56826c40d600aab610a24
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+ze:8QKotcTlBk9YwzEhPbYzjmMtccXk8KC
Checks for missing Authenticode signature.
resource |
---|
4d20d37d58acfcce32a30a1a4f96c49642a837a8d2bae7dc883ba7442286bca3 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ