CreateCheckLicense
CreateCheckLicense1
DestroyCheckLicense
Static task
static1
Behavioral task
behavioral1
Sample
phc.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
phc.dll
Resource
win10v2004-20231222-en
Target
phc.dll
Size
705KB
MD5
82419880fd4a4779aacce923c14a2d7f
SHA1
29fcfc1939df03ea52a94b3e941f4c7b7aa716f8
SHA256
9b1ff7c8c8d7c39c66690f07faca073fa75ace30b913bee17931a0800c9ddd3e
SHA512
8d78c09a1b012300abe81f231cdecb1acda177719abe02f6655c45109b563ff8d284b46e32b85b3c134f4514087c360cdcb08929b9ed9c0e31ff6e44f1690f92
SSDEEP
12288:XoAyqlZHmCiVLljFG6HXSlnEJ1pcBMCU1upSBwjUP9zR0nrN0PIOHJi+:XgzLLWlmD8MCHCrf0ncHJi+
Checks for missing Authenticode signature.
resource |
---|
phc.dll |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalFree
GlobalAlloc
ReadFile
GetFileSize
CreateFileW
CreateDirectoryW
GetModuleFileNameW
GetVersion
GetLocalTime
GetProcAddress
LoadLibraryW
FreeLibrary
CloseHandle
GetLastError
WriteConsoleW
HeapSize
GetConsoleCP
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
FindFirstFileExA
GetProcessHeap
GetOEMCP
IsValidCodePage
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
ReadConsoleW
GetConsoleMode
GetFileType
GetStdHandle
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
HeapFree
HeapReAlloc
HeapAlloc
LoadLibraryExW
InterlockedFlushSList
RaiseException
RtlUnwind
LocalFree
GetACP
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
FlushFileBuffers
SetEndOfFile
SetFilePointerEx
WriteFile
GetSystemInfo
VirtualAlloc
VirtualFree
FindClose
FindNextFileA
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
SHGetSpecialFolderPathW
CoCreateInstance
CoSetProxyBlanket
CoInitializeEx
CoInitializeSecurity
CoUninitialize
SafeArrayGetLBound
SafeArrayUnaccessData
SafeArrayGetUBound
SafeArrayAccessData
VariantChangeType
SysAllocString
SysFreeString
VariantInit
VariantClear
PathFileExistsW
GetAdaptersInfo
WSACleanup
gethostname
WSAStartup
htonl
inet_addr
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
CreateCheckLicense
CreateCheckLicense1
DestroyCheckLicense
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ