PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
0b0c541257067570f3637e5f3f2c21f9375ba24df525f57f57ab8abbdca0009e.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0b0c541257067570f3637e5f3f2c21f9375ba24df525f57f57ab8abbdca0009e.dll
Resource
win10v2004-20240802-en
Target
0b0c541257067570f3637e5f3f2c21f9375ba24df525f57f57ab8abbdca0009e
Size
3.5MB
MD5
16bc3f4bdcdca78a5da0cc97197900cd
SHA1
6f5439e2b1eb247ff71e8f9e0adf9ed446cd0128
SHA256
0b0c541257067570f3637e5f3f2c21f9375ba24df525f57f57ab8abbdca0009e
SHA512
6c6a2fa2863f532474e8b6d3c8bbfab67f85f58aa75ebb5d4d0453c50c971b2aa8cf0c06213a4720dc216954bfd7d4f8c8c0f6329485ceca08de6d2298b97bf7
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+za:8QKotcTlBk9YwzEhPbYzjmMtccXk8KW
Checks for missing Authenticode signature.
resource |
---|
0b0c541257067570f3637e5f3f2c21f9375ba24df525f57f57ab8abbdca0009e |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ