PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
35c230ac82e70a06a83ad374aa278a9e0a5a9a4ebf47864c337f09e2494421ee.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
35c230ac82e70a06a83ad374aa278a9e0a5a9a4ebf47864c337f09e2494421ee.dll
Resource
win10v2004-20240802-en
Target
35c230ac82e70a06a83ad374aa278a9e0a5a9a4ebf47864c337f09e2494421ee
Size
3.5MB
MD5
6b155e93eaa7b36ffd5d07dcfad1fa5f
SHA1
73742021b45a804f19b8f59d4ac34cd5c32c49a6
SHA256
35c230ac82e70a06a83ad374aa278a9e0a5a9a4ebf47864c337f09e2494421ee
SHA512
7abecf848491f8b487305622bd83f679a9a3606d4c8381bd05acb0bf938e97d1b15a666507dae5084de7d7c2f4b1aa34ae2ff64f1b9ce60b3056554d78bdb507
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zP:8QKotcTlBk9YwzEhPbYzjmMtccXk8KL
Checks for missing Authenticode signature.
resource |
---|
35c230ac82e70a06a83ad374aa278a9e0a5a9a4ebf47864c337f09e2494421ee |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ