PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
7eb508319ce4127c601ca495bdbb5e29c0d3f3fc83a83d75adeeeadb614d3286.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7eb508319ce4127c601ca495bdbb5e29c0d3f3fc83a83d75adeeeadb614d3286.dll
Resource
win10v2004-20240802-en
Target
7eb508319ce4127c601ca495bdbb5e29c0d3f3fc83a83d75adeeeadb614d3286
Size
3.5MB
MD5
3e159442096eda1b0195940d0e4bae68
SHA1
e76ccc7e6f1f469e75464ba267dfbf3cdb2eaff2
SHA256
7eb508319ce4127c601ca495bdbb5e29c0d3f3fc83a83d75adeeeadb614d3286
SHA512
079cea131d823f2abf7e7681256443911dcab4d3b246bc77ba5c9b555cfeaa4b7fb544ffee09a3afb287fde8f73212ac843c7edd29fce7c4d9f012663bba241a
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zb:8QKotcTlBk9YwzEhPbYzjmMtccXk8K/
Checks for missing Authenticode signature.
resource |
---|
7eb508319ce4127c601ca495bdbb5e29c0d3f3fc83a83d75adeeeadb614d3286 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ