PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
c19a993060219f919a688fe0b3ff58898a225d7465eb15cf4b6dd70d29c5d7f7.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c19a993060219f919a688fe0b3ff58898a225d7465eb15cf4b6dd70d29c5d7f7.dll
Resource
win10v2004-20240802-en
Target
c19a993060219f919a688fe0b3ff58898a225d7465eb15cf4b6dd70d29c5d7f7
Size
3.5MB
MD5
db697f3e37c4b64003b627b7bc04ff94
SHA1
eccbf7c02d3c410752eb2595385022e56d196998
SHA256
c19a993060219f919a688fe0b3ff58898a225d7465eb15cf4b6dd70d29c5d7f7
SHA512
f987bf3058cef4eae968f98fa96d98b6eeb34595f5a7681a6e4faa64338225c2e74e3360b591dae913c41d1081178e4083b258aa71366fb4a670c776f8f090f2
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zt:8QKotcTlBk9YwzEhPbYzjmMtccXk8KR
Checks for missing Authenticode signature.
resource |
---|
c19a993060219f919a688fe0b3ff58898a225d7465eb15cf4b6dd70d29c5d7f7 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ