PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
f078ceb30e48d7f3257dbc06a2dd66bdf5ef5e558f39c9458c3b61f3d9f25d7a.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
f078ceb30e48d7f3257dbc06a2dd66bdf5ef5e558f39c9458c3b61f3d9f25d7a.dll
Resource
win10v2004-20240802-en
Target
f078ceb30e48d7f3257dbc06a2dd66bdf5ef5e558f39c9458c3b61f3d9f25d7a
Size
3.5MB
MD5
f12538cb57fef070e2aafb97d1f6f48b
SHA1
b8240d630ba5a9178a13faf5a67014e21522faa9
SHA256
f078ceb30e48d7f3257dbc06a2dd66bdf5ef5e558f39c9458c3b61f3d9f25d7a
SHA512
a25a620850a3db08c832b63151bad58b774737b4f374318c7e0e9b9e5209107c6c8d9d76d0e4d8d11f3a07072320d7cc38efcbf829a194f168bf0f30af0cf2c8
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+z8:8QKotcTlBk9YwzEhPbYzjmMtccXk8K4
Checks for missing Authenticode signature.
resource |
---|
f078ceb30e48d7f3257dbc06a2dd66bdf5ef5e558f39c9458c3b61f3d9f25d7a |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ