PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
e32f6f2ad705d12ee2f86b8f0154584b6691d3b39a25c6c1d9eaf4d11dfc0f67.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
e32f6f2ad705d12ee2f86b8f0154584b6691d3b39a25c6c1d9eaf4d11dfc0f67.dll
Resource
win10v2004-20240802-en
Target
e32f6f2ad705d12ee2f86b8f0154584b6691d3b39a25c6c1d9eaf4d11dfc0f67
Size
3.5MB
MD5
2b04616d67dcac962e49c59fdc66b7ab
SHA1
3e32d0dcf1ebb71c557d6dd8383eace111292e81
SHA256
e32f6f2ad705d12ee2f86b8f0154584b6691d3b39a25c6c1d9eaf4d11dfc0f67
SHA512
5b7082f72ec7160be25ce43cd8ddaf75b42ce70aca1ffbcf2fc0b9ef7201c3003150934fdb0e0de01ac4e24f7bd7a75b7e8095f32d0cfef8ab588723af170d9b
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zx:8QKotcTlBk9YwzEhPbYzjmMtccXk8KV
Checks for missing Authenticode signature.
resource |
---|
e32f6f2ad705d12ee2f86b8f0154584b6691d3b39a25c6c1d9eaf4d11dfc0f67 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ