PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
0d16e1736b2aad062645daaae503671cd563989031270594a975e32611ab2658.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0d16e1736b2aad062645daaae503671cd563989031270594a975e32611ab2658.dll
Resource
win10v2004-20240802-en
Target
0d16e1736b2aad062645daaae503671cd563989031270594a975e32611ab2658
Size
3.5MB
MD5
244fdc587dd061f51631185a5feeebe7
SHA1
11bbb66acafede367a50623ed916c4bf90d9ddf0
SHA256
0d16e1736b2aad062645daaae503671cd563989031270594a975e32611ab2658
SHA512
ea6e945304f7c8879c4368f9d69dfa07ab4fa47a6088e0d2f898c5fff24240d0e4515a1cffe35e5e40683d17be629329bf428204030586eac5fa5e7ddf866045
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zl:8QKotcTlBk9YwzEhPbYzjmMtccXk8KR
Checks for missing Authenticode signature.
resource |
---|
0d16e1736b2aad062645daaae503671cd563989031270594a975e32611ab2658 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ