PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
e66037a5109e169af9298f71c69c0ad3f27a535001e449dc32816a57806963cf.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e66037a5109e169af9298f71c69c0ad3f27a535001e449dc32816a57806963cf.dll
Resource
win10v2004-20240802-en
Target
e66037a5109e169af9298f71c69c0ad3f27a535001e449dc32816a57806963cf
Size
3.5MB
MD5
a3e62206f94d05037b1e541476becb55
SHA1
315409b1e52018df7dabc788f9a47cf6df932c18
SHA256
e66037a5109e169af9298f71c69c0ad3f27a535001e449dc32816a57806963cf
SHA512
32b65202f99641281b7716381b4b487cfe964e03408b7c2cf865aa8e4020f25db776adaf781de8b6d2abfed3f80ac68ea70028be8aab7b49b4be76be01441cd7
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zO:8QKotcTlBk9YwzEhPbYzjmMtccXk8K6
Checks for missing Authenticode signature.
resource |
---|
e66037a5109e169af9298f71c69c0ad3f27a535001e449dc32816a57806963cf |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ