PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
4124684eb804e5a647a485c809c0e98769206ffc37ea615753e34e40e11e099e.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
4124684eb804e5a647a485c809c0e98769206ffc37ea615753e34e40e11e099e.dll
Resource
win10v2004-20240802-en
Target
4124684eb804e5a647a485c809c0e98769206ffc37ea615753e34e40e11e099e
Size
3.5MB
MD5
6538e6af00bd37e7f5e1a1bf20f4b61c
SHA1
d1bbd254c37e0d9168cd16cca59c5f97a0a0e35c
SHA256
4124684eb804e5a647a485c809c0e98769206ffc37ea615753e34e40e11e099e
SHA512
617cb4aebfe57b3ee32e61e68ee69690db69e044c30abb232b39e30a1b882e0219ba55e16025bf39b4ca7a4ffcd91cf5b8f2af9c7bbf31e8616788529f53fe87
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+z3:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kj
Checks for missing Authenticode signature.
resource |
---|
4124684eb804e5a647a485c809c0e98769206ffc37ea615753e34e40e11e099e |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ