PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
6f633a5f760084b46aed56408464018abc4e8749a64a600fdddd953844e8eee5.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6f633a5f760084b46aed56408464018abc4e8749a64a600fdddd953844e8eee5.dll
Resource
win10v2004-20240802-en
Target
6f633a5f760084b46aed56408464018abc4e8749a64a600fdddd953844e8eee5
Size
3.5MB
MD5
67020a878d84e5c5ffa8c347a689cb70
SHA1
66b8a125178b6ee76c90c9a26bc25d7da000d66c
SHA256
6f633a5f760084b46aed56408464018abc4e8749a64a600fdddd953844e8eee5
SHA512
a2889ca6b3419ba60df01303a9c174dc4c65e8efc4f8620a9b22b1624bc447c4c5712bd36337009393f9f48e067dda777d6fb6bf7526067773f3143fc3bc9ea6
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zH:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kj
Checks for missing Authenticode signature.
resource |
---|
6f633a5f760084b46aed56408464018abc4e8749a64a600fdddd953844e8eee5 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ