PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
73c82189679abe1e07b74d89e46a1610b559e37561fb0fe8673556b2b51d5d6e.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
73c82189679abe1e07b74d89e46a1610b559e37561fb0fe8673556b2b51d5d6e.dll
Resource
win10v2004-20240802-en
Target
73c82189679abe1e07b74d89e46a1610b559e37561fb0fe8673556b2b51d5d6e
Size
3.5MB
MD5
13a41401d311edd419818e0bfa8fd1a5
SHA1
439f583c097641e3a2f69709933ae85856cf2211
SHA256
73c82189679abe1e07b74d89e46a1610b559e37561fb0fe8673556b2b51d5d6e
SHA512
41d17465034bc9f92775ad66ebe93dbe7120a1ce6d36ab637e33adaba95879331039632645eee2ff8e5bea1390291aedd0d931e488f7d338fa9bbf62161e8dfd
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+z3:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kj
Checks for missing Authenticode signature.
resource |
---|
73c82189679abe1e07b74d89e46a1610b559e37561fb0fe8673556b2b51d5d6e |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ