PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
c62e155a5f29abc4a9a668a69a111034489c825314a1bcd24c5b8dd52c5dbdad.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c62e155a5f29abc4a9a668a69a111034489c825314a1bcd24c5b8dd52c5dbdad.dll
Resource
win10v2004-20240802-en
Target
c62e155a5f29abc4a9a668a69a111034489c825314a1bcd24c5b8dd52c5dbdad
Size
3.5MB
MD5
660ad9865cf34f7013ff18b1477e58a5
SHA1
2c55fab0a1ae3081bf32ccf00bddf6f1ab427cd2
SHA256
c62e155a5f29abc4a9a668a69a111034489c825314a1bcd24c5b8dd52c5dbdad
SHA512
9f95f990959458be8bc8c41773a51479e02dde7acd61833d95417d6783dc887130dd9b8bd06d72941be134b883de8d83d6b1800dc29cc152dfc1e167052692d9
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zn:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kz
Checks for missing Authenticode signature.
resource |
---|
c62e155a5f29abc4a9a668a69a111034489c825314a1bcd24c5b8dd52c5dbdad |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ