PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
0c8062ba3694cbd7ef25a7bd7ffe0e13f9dc37539d394ee15f370041bf34ccfe.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0c8062ba3694cbd7ef25a7bd7ffe0e13f9dc37539d394ee15f370041bf34ccfe.dll
Resource
win10v2004-20240910-en
Target
0c8062ba3694cbd7ef25a7bd7ffe0e13f9dc37539d394ee15f370041bf34ccfe
Size
3.5MB
MD5
6a17dbfac4090036cba337f4c2947e23
SHA1
815faa5f2d0fba13e39445acbbcb5685a28590bb
SHA256
0c8062ba3694cbd7ef25a7bd7ffe0e13f9dc37539d394ee15f370041bf34ccfe
SHA512
68bff0f84c71aeef752a15df611c172242fea0baccfc54a9e609280257a866d66c9073d50f8199880701bd9c2908dc72d2529aa24de9ae561742d5096bef5670
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zO:8QKotcTlBk9YwzEhPbYzjmMtccXk8K6
Checks for missing Authenticode signature.
resource |
---|
0c8062ba3694cbd7ef25a7bd7ffe0e13f9dc37539d394ee15f370041bf34ccfe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ