PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
447ba3455528bd2eeac174b59a4521727971ba05c12551296459684abd533920.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
447ba3455528bd2eeac174b59a4521727971ba05c12551296459684abd533920.dll
Resource
win10v2004-20240802-en
Target
447ba3455528bd2eeac174b59a4521727971ba05c12551296459684abd533920
Size
3.5MB
MD5
4d4497063818dc002e7489a9e91d3554
SHA1
cd0d7d458b7a9143f08a22522360531be73b1760
SHA256
447ba3455528bd2eeac174b59a4521727971ba05c12551296459684abd533920
SHA512
053cf9b095dc66f0839dc2c53cf713d462b2894434f385c6c49815304d1c5762912b49b43ecc13d27005131eadb26c584134c276bc713057984f8c02347d1e86
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zH:8QKotcTlBk9YwzEhPbYzjmMtccXk8KL
Checks for missing Authenticode signature.
resource |
---|
447ba3455528bd2eeac174b59a4521727971ba05c12551296459684abd533920 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ