PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
70fa1d07bc7a706895bcb80c59aae9ce1da0efacaac4d929720ed7449ec7a97e.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
70fa1d07bc7a706895bcb80c59aae9ce1da0efacaac4d929720ed7449ec7a97e.dll
Resource
win10v2004-20240802-en
Target
70fa1d07bc7a706895bcb80c59aae9ce1da0efacaac4d929720ed7449ec7a97e
Size
3.5MB
MD5
c516cb610efca42f0eb7831607edded9
SHA1
ed8b6443c11a8b86522831c86add157cf707c565
SHA256
70fa1d07bc7a706895bcb80c59aae9ce1da0efacaac4d929720ed7449ec7a97e
SHA512
bb5f417584ad333b8b8a7921a941c15af72379be14e115f590baec5ef090dd529c9dc9c96c8be07bb0891c37041438efb83d6f6e812a65c66661fbb43a90957b
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zK:8QKotcTlBk9YwzEhPbYzjmMtccXk8Ke
Checks for missing Authenticode signature.
resource |
---|
70fa1d07bc7a706895bcb80c59aae9ce1da0efacaac4d929720ed7449ec7a97e |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ