PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
6b218d1a68bcb7e5c6c015a9984361d491d8600b964c3d69c245a94755914f02.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6b218d1a68bcb7e5c6c015a9984361d491d8600b964c3d69c245a94755914f02.dll
Resource
win10v2004-20240802-en
Target
6b218d1a68bcb7e5c6c015a9984361d491d8600b964c3d69c245a94755914f02
Size
3.5MB
MD5
482acf214c003bea2d2506e3ea351f9a
SHA1
2d6033426ead347fb9cc888294007dc3ba299dc2
SHA256
6b218d1a68bcb7e5c6c015a9984361d491d8600b964c3d69c245a94755914f02
SHA512
4105d19502fef3057d5b6d6a1f5525f51fc58b2bf412db80ad83a7efe0b4519dcdef79ea345ffa90b69518a634d28bf00eb0dce7ed24282e68c6f8943546c644
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zH:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kb
Checks for missing Authenticode signature.
resource |
---|
6b218d1a68bcb7e5c6c015a9984361d491d8600b964c3d69c245a94755914f02 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ