PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
09b6693535623c92cd8e738b5d72e21527249bceadfcef4a2bda866622c8691e.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
09b6693535623c92cd8e738b5d72e21527249bceadfcef4a2bda866622c8691e.dll
Resource
win10v2004-20240802-en
Target
09b6693535623c92cd8e738b5d72e21527249bceadfcef4a2bda866622c8691e
Size
3.5MB
MD5
6cebacbef594c82319b023d52194142d
SHA1
fc2549992c5f74b1e85e490ef95aff20f1b08e53
SHA256
09b6693535623c92cd8e738b5d72e21527249bceadfcef4a2bda866622c8691e
SHA512
a2167b1835643281c4b7920b6d38c57f3194ac3f6ad490c4170db722301d17eca43fd58f03b25ba42e5f244a4633fc23f09cd4ec9a00356b24a7e9742827921a
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zy:8QKotcTlBk9YwzEhPbYzjmMtccXk8KO
Checks for missing Authenticode signature.
resource |
---|
09b6693535623c92cd8e738b5d72e21527249bceadfcef4a2bda866622c8691e |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ