PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
db20a15e09a03f5edad58346f2aaac18efe078ae18a72fdc9d9ef8e42f715c68.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db20a15e09a03f5edad58346f2aaac18efe078ae18a72fdc9d9ef8e42f715c68.dll
Resource
win10v2004-20240802-en
Target
db20a15e09a03f5edad58346f2aaac18efe078ae18a72fdc9d9ef8e42f715c68
Size
3.5MB
MD5
3a790d591a7e7c7bc821febd457eb0cd
SHA1
1d67e8ac1ca42aea6218938033e9c8bc4b3ae445
SHA256
db20a15e09a03f5edad58346f2aaac18efe078ae18a72fdc9d9ef8e42f715c68
SHA512
2494eb484101a2d1944a36713f72363d8cf5005c14fc7af6aba52d2a8ef68542b7b0ee34136ea255e115e96692dc4abed9fc76887b1eaf9444531a1a4aa4fbd9
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zc:8QKotcTlBk9YwzEhPbYzjmMtccXk8KA
Checks for missing Authenticode signature.
resource |
---|
db20a15e09a03f5edad58346f2aaac18efe078ae18a72fdc9d9ef8e42f715c68 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ