PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
61843e160a30481b107f6c50c571bff814e5b140577117d7d16236113dee5ef8.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
61843e160a30481b107f6c50c571bff814e5b140577117d7d16236113dee5ef8.dll
Resource
win10v2004-20240802-en
Target
61843e160a30481b107f6c50c571bff814e5b140577117d7d16236113dee5ef8
Size
3.5MB
MD5
b995396ed2f0cda5d8a8fbfa4f135046
SHA1
5890657bde7d230c5756669ccd6714abcdf6dc81
SHA256
61843e160a30481b107f6c50c571bff814e5b140577117d7d16236113dee5ef8
SHA512
6d162ef2c86e67452bb735d37943aee32afb6c1b60d8868375caf191e6bd6de6294e9e7868724919e0d50e7f3c85525d82ad7f9818b02f3540d1b16a135ebf3b
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zv:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kb
Checks for missing Authenticode signature.
resource |
---|
61843e160a30481b107f6c50c571bff814e5b140577117d7d16236113dee5ef8 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ