CreateCheckLicense
CreateCheckLicense1
DestroyCheckLicense
Static task
static1
Behavioral task
behavioral1
Sample
phc64.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
phc64.dll
Resource
win10v2004-20230915-en
Target
phc64.dll
Size
770KB
MD5
bfdb0c3b8b7f98c5a8701be5f574f4e2
SHA1
23f27a2d94ac245a6286c194b8f863d7fa94a2ba
SHA256
162b6cdf26a1a34ff0420b4dc8993ce1e5341fd0d581587a1dd137f57345b9a7
SHA512
e4233e60dd6d3a1f9c2b6b1cf93935d8147b9bbf8e5a9698f66fa3712ddf6513197150b5d9a88bec43e69af817e3954ca54a32c1d29e96ac212968efbad0f77f
SSDEEP
12288:1Xordg38WhP3fpz2aNVK0yi2MCU1+WhBwjUP9FR0nrM6ooZzvsc:ZCg38W5fpzJNVK0yBMCgDr10n3DZzvs
Checks for missing Authenticode signature.
resource |
---|
phc64.dll |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GlobalFree
GlobalAlloc
ReadFile
GetFileSize
CreateFileW
CreateDirectoryW
GetModuleFileNameW
GetVersion
GetLocalTime
GetProcAddress
LoadLibraryW
FreeLibrary
CloseHandle
GetLastError
WriteConsoleW
HeapSize
GetConsoleCP
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
FindFirstFileExA
GetProcessHeap
GetOEMCP
IsValidCodePage
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
ReadConsoleW
GetConsoleMode
GetFileType
GetStdHandle
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
HeapFree
HeapReAlloc
HeapAlloc
LoadLibraryExW
InterlockedFlushSList
RaiseException
RtlPcToFileHeader
RtlUnwindEx
LocalFree
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
FlushFileBuffers
SetEndOfFile
SetFilePointerEx
WriteFile
GetSystemInfo
VirtualAlloc
VirtualFree
FindClose
FindNextFileA
GetACP
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
SHGetSpecialFolderPathW
CoCreateInstance
CoSetProxyBlanket
CoInitializeEx
CoInitializeSecurity
CoUninitialize
SafeArrayGetLBound
SafeArrayUnaccessData
SafeArrayGetUBound
SafeArrayAccessData
VariantChangeType
SysAllocString
SysFreeString
VariantInit
VariantClear
PathFileExistsW
GetAdaptersInfo
WSACleanup
gethostname
WSAStartup
htonl
inet_addr
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
CreateCheckLicense
CreateCheckLicense1
DestroyCheckLicense
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ