PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
3fd5a72d700bd3d9e850c47b8171c3565bc6b54abb4994986ea719900d3bb3a0.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3fd5a72d700bd3d9e850c47b8171c3565bc6b54abb4994986ea719900d3bb3a0.dll
Resource
win10v2004-20240802-en
Target
3fd5a72d700bd3d9e850c47b8171c3565bc6b54abb4994986ea719900d3bb3a0
Size
3.5MB
MD5
a057c49cd07ccd143ae611352b740467
SHA1
5e45be7a709027348126cac0389579670b4ee819
SHA256
3fd5a72d700bd3d9e850c47b8171c3565bc6b54abb4994986ea719900d3bb3a0
SHA512
8b4d3814817d663c290223b715be71b673882170d6d218b4a30d8357f08fd4de998831ef56f718593761a33a7e55034aee85b8ca37729c5732f39e5fc55140b5
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zx:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kt
Checks for missing Authenticode signature.
resource |
---|
3fd5a72d700bd3d9e850c47b8171c3565bc6b54abb4994986ea719900d3bb3a0 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ