PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
5a6a99fd8f930e652d4939db470b5fe3ae3cf6fba04ca2ac8bb8c69f0b7496ed.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5a6a99fd8f930e652d4939db470b5fe3ae3cf6fba04ca2ac8bb8c69f0b7496ed.dll
Resource
win10v2004-20240802-en
Target
5a6a99fd8f930e652d4939db470b5fe3ae3cf6fba04ca2ac8bb8c69f0b7496ed
Size
3.5MB
MD5
d9f73d93254539a019309ab31f903e4f
SHA1
fafe6d3718f7a5e2ee9a57d27f81d307a4f7df90
SHA256
5a6a99fd8f930e652d4939db470b5fe3ae3cf6fba04ca2ac8bb8c69f0b7496ed
SHA512
5cd9d29f72fa9e92caaccd4ec2ea01d1fde4d0b98e39af321a4c0ed51ca806cf6e8986238edd72b83e83eb4695723241d070204ecf593d8355563739613a8410
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zr:8QKotcTlBk9YwzEhPbYzjmMtccXk8K3
Checks for missing Authenticode signature.
resource |
---|
5a6a99fd8f930e652d4939db470b5fe3ae3cf6fba04ca2ac8bb8c69f0b7496ed |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ