PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
8eb1927c68833d500a57d1e82b1c3bd49cd0436e59b9d8f7a6a7c4da8d74bfc1.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8eb1927c68833d500a57d1e82b1c3bd49cd0436e59b9d8f7a6a7c4da8d74bfc1.dll
Resource
win10v2004-20240802-en
Target
8eb1927c68833d500a57d1e82b1c3bd49cd0436e59b9d8f7a6a7c4da8d74bfc1
Size
3.5MB
MD5
3e4904afabb76276c825aae3535ef89b
SHA1
04f45c79d3ad39e556016fd01d95f94b2edeada4
SHA256
8eb1927c68833d500a57d1e82b1c3bd49cd0436e59b9d8f7a6a7c4da8d74bfc1
SHA512
5513d6206036db50aac8b893d7f425afe07429bde12fafa4f6bdd42c593ca446bc01e8ba943b36b960cb8a40f7d222e9707497771d6558cf98e90032e94e7a10
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zC:8QKotcTlBk9YwzEhPbYzjmMtccXk8Km
Checks for missing Authenticode signature.
resource |
---|
8eb1927c68833d500a57d1e82b1c3bd49cd0436e59b9d8f7a6a7c4da8d74bfc1 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ