PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
bd7a49336df04a0f36b6ac927445a30c60384bedafbfdbb58ed33ac59e4ff885.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bd7a49336df04a0f36b6ac927445a30c60384bedafbfdbb58ed33ac59e4ff885.dll
Resource
win10v2004-20240802-en
Target
bd7a49336df04a0f36b6ac927445a30c60384bedafbfdbb58ed33ac59e4ff885
Size
3.5MB
MD5
9661aa8f90cdae5a95c38719aedb3611
SHA1
05355347338088d77901674a37a4757e1486ce0a
SHA256
bd7a49336df04a0f36b6ac927445a30c60384bedafbfdbb58ed33ac59e4ff885
SHA512
379a1bcc1443664d7a5f38f55ac610fe1204153473910c41e0f2ac4c8cdeb6d1bb24d24f0a14ff004e0ad2a94a07223df5bd18788ca5418d418902267ca10803
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+z3:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kb
Checks for missing Authenticode signature.
resource |
---|
bd7a49336df04a0f36b6ac927445a30c60384bedafbfdbb58ed33ac59e4ff885 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ