PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
9c2303818b39c6c76bd250a3180bf25aa364fcb0e6999abcdf228733f28318d3.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
9c2303818b39c6c76bd250a3180bf25aa364fcb0e6999abcdf228733f28318d3.dll
Resource
win10v2004-20240910-en
Target
9c2303818b39c6c76bd250a3180bf25aa364fcb0e6999abcdf228733f28318d3
Size
3.5MB
MD5
dc6b6f824b0d0a340bb63e0f370a6515
SHA1
638f804eb8963d84b98253cb5b5a10d59e344429
SHA256
9c2303818b39c6c76bd250a3180bf25aa364fcb0e6999abcdf228733f28318d3
SHA512
68eb12d9ece73f127e79be2258e6df389811a9587e518010c6c49cd2fecade1c10f8e11397e11efab4b19df74fb91dd1642841602400cfea538b6a0179f7a383
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zG:8QKotcTlBk9YwzEhPbYzjmMtccXk8KS
Checks for missing Authenticode signature.
resource |
---|
9c2303818b39c6c76bd250a3180bf25aa364fcb0e6999abcdf228733f28318d3 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ