PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
dee1d53333d0404572c923f64c8714a6cef5f3e00b2b36608a1fe9e971ed0554.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dee1d53333d0404572c923f64c8714a6cef5f3e00b2b36608a1fe9e971ed0554.dll
Resource
win10v2004-20240802-en
Target
dee1d53333d0404572c923f64c8714a6cef5f3e00b2b36608a1fe9e971ed0554
Size
3.5MB
MD5
93a7386196d5f40a53e2a20b54d4db85
SHA1
d9f8a8c915e75103926be0bf04d4b9e70be79df4
SHA256
dee1d53333d0404572c923f64c8714a6cef5f3e00b2b36608a1fe9e971ed0554
SHA512
d9a1776000808278a1c61601b3c38a1413e224cbbb9e18672b1cbffe7a3820ad5a5fad396b3046e48347c7971144df9556f65194e0fb9a05996bc91f572e64f3
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zn:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kj
Checks for missing Authenticode signature.
resource |
---|
dee1d53333d0404572c923f64c8714a6cef5f3e00b2b36608a1fe9e971ed0554 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ