PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
09fc6d6a9caa28f26e15ff43959c90eadce09b61299889037b8115fb26ccb66e.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
09fc6d6a9caa28f26e15ff43959c90eadce09b61299889037b8115fb26ccb66e.dll
Resource
win10v2004-20240802-en
Target
09fc6d6a9caa28f26e15ff43959c90eadce09b61299889037b8115fb26ccb66e
Size
3.5MB
MD5
71d15c20754b0ae4425ae85d3b3d3961
SHA1
281e4b0c1e2d36e79417b5aac56fc2a41c987098
SHA256
09fc6d6a9caa28f26e15ff43959c90eadce09b61299889037b8115fb26ccb66e
SHA512
215cfcdf760f28b81d227b7eb7a387c2fe4941152b32ca46e8c7e43003dd183de1f61269f472c030a824521138de74b4d169fd12499c3ea6038dd5ea6da36bd4
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zt:8QKotcTlBk9YwzEhPbYzjmMtccXk8KZ
Checks for missing Authenticode signature.
resource |
---|
09fc6d6a9caa28f26e15ff43959c90eadce09b61299889037b8115fb26ccb66e |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ