PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
08dee97014fd7c165d1329f26da7a4cfbb897e21da52484c8361c32913d0f144.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
08dee97014fd7c165d1329f26da7a4cfbb897e21da52484c8361c32913d0f144.dll
Resource
win10v2004-20240802-en
Target
08dee97014fd7c165d1329f26da7a4cfbb897e21da52484c8361c32913d0f144
Size
3.5MB
MD5
edf7cede75ecc0b900f203c16d6cf707
SHA1
70ea0cd6da09b4ca60a6a57bc1d3185cdfefbb41
SHA256
08dee97014fd7c165d1329f26da7a4cfbb897e21da52484c8361c32913d0f144
SHA512
10c16d248a7cd44391ee34fb680702b2e5158b05996658d08a30c34e20e8d54ab0a02635d7bcacccb7c2636fde238c849b3aee7fe4e3dbbfb3fdb15301af4e92
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+z0:8QKotcTlBk9YwzEhPbYzjmMtccXk8KI
Checks for missing Authenticode signature.
resource |
---|
08dee97014fd7c165d1329f26da7a4cfbb897e21da52484c8361c32913d0f144 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ