PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
a59f72d95bf7bc593b92078b69fe4bff7cc9ea0587d5868fac7b04a2aa5f35b9.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a59f72d95bf7bc593b92078b69fe4bff7cc9ea0587d5868fac7b04a2aa5f35b9.dll
Resource
win10v2004-20240802-en
Target
a59f72d95bf7bc593b92078b69fe4bff7cc9ea0587d5868fac7b04a2aa5f35b9
Size
3.5MB
MD5
2da23cc9e16a3b000c663d251926370e
SHA1
439a8e75cee48dc4c9bb86a93495eafd740ad63d
SHA256
a59f72d95bf7bc593b92078b69fe4bff7cc9ea0587d5868fac7b04a2aa5f35b9
SHA512
04457a591646be90cd03f503693c45060b6eaa6c6c83bbbd92868b30c3d60d28b38aebb5ca77a768468baa6aee620d1ad6f46f50b3eeb7bd0b9b7f1e54bb0809
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+z5:8QKotcTlBk9YwzEhPbYzjmMtccXk8K9
Checks for missing Authenticode signature.
resource |
---|
a59f72d95bf7bc593b92078b69fe4bff7cc9ea0587d5868fac7b04a2aa5f35b9 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ