PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
0c8adc5bffc320d390e0366c41535671f077ac6eb9b066214c08726360c62d4a.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0c8adc5bffc320d390e0366c41535671f077ac6eb9b066214c08726360c62d4a.dll
Resource
win10v2004-20240802-en
Target
0c8adc5bffc320d390e0366c41535671f077ac6eb9b066214c08726360c62d4a
Size
3.5MB
MD5
d374208676b8208953403e6113afa141
SHA1
4c03fbc8c2eeee1c25de87f4e0e4c0e4e5f658b5
SHA256
0c8adc5bffc320d390e0366c41535671f077ac6eb9b066214c08726360c62d4a
SHA512
d32409379be16501dbe95d4f7405d0aaae9765f579ffa70170d7f19b98115e92a25152dfbe2c11ce68112f154e0fd927464f117c22375d601173a5c996a646b9
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zu:8QKotcTlBk9YwzEhPbYzjmMtccXk8KK
Checks for missing Authenticode signature.
resource |
---|
0c8adc5bffc320d390e0366c41535671f077ac6eb9b066214c08726360c62d4a |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ