PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
a80e8f6e6e3c0e16bb84b25c15091f8e664949792b634e6f2fcae42f98e47949.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a80e8f6e6e3c0e16bb84b25c15091f8e664949792b634e6f2fcae42f98e47949.dll
Resource
win10v2004-20240802-en
Target
a80e8f6e6e3c0e16bb84b25c15091f8e664949792b634e6f2fcae42f98e47949
Size
3.5MB
MD5
63bc50d9a9c9b0d38825582c183446f3
SHA1
ba369145b14b4663ff087e8f3ef4454700722d26
SHA256
a80e8f6e6e3c0e16bb84b25c15091f8e664949792b634e6f2fcae42f98e47949
SHA512
eefc598a5af1ab23d90002be44b33c2ce306bf036061b3410fc12852d05c14f27204e076fdd88353231e58af4f4970a8e07c0316bbb04aafe7d01dac42a8628d
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zS:8QKotcTlBk9YwzEhPbYzjmMtccXk8KO
Checks for missing Authenticode signature.
resource |
---|
a80e8f6e6e3c0e16bb84b25c15091f8e664949792b634e6f2fcae42f98e47949 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ