GSSBFGT
ObGetVersionInfo
ObIsPlexFunction
Static task
static1
Behavioral task
behavioral1
Sample
8108691250235ef48bc38262570e1d6b.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
8108691250235ef48bc38262570e1d6b.dll
Resource
win10v2004-20240226-en
Target
8108691250235ef48bc38262570e1d6b
Size
649KB
MD5
8108691250235ef48bc38262570e1d6b
SHA1
4e69fc3d766260f4e33ae265b1f980e22291f396
SHA256
c0c7bdbc9fc2e88514e820020c974deb1f2e5b4d48d3c4ca4bb02cdc54f5c5bb
SHA512
2510bf238828312bef750ea5bb77f1485c5de7fc2b0705801fdaed5284c5fa335e076405836b01bee519c3c3c03bf76a16ece3c88a15263455a8243ba60d08e9
SSDEEP
6144:/rW6bflyvMFfgY1QHaSk8FJJCiWix6M+LEFHCaJVVLl8YFC6Z41:/rW6pGqpHioLOHoK41
Checks for missing Authenticode signature.
resource |
---|
8108691250235ef48bc38262570e1d6b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?strGetAS400StateDefault@ObDateFld@@UAEPADPADAAHGHHD@Z
?PutText@ObDateFld@@UAEXPBD@Z
?strGetText@ObDateFld@@UAE?AVCString@@XZ
?Init@ObString@@AAEXHJH@Z
??0ObTimeStampFld@@QAE@HHHHHHJG@Z
??0ObTimeFld@@QAE@HHHG@Z
?CheckLength@ObString@@AAEXXZ
?strGetMaskedText@ObTimeFld@@UAE?AVCString@@PBD@Z
?fSetStateFromAS400@ObTimeFld@@UAEHPBDIHHD@Z
?strGetAS400StateDefault@ObTimeFld@@UAEPADPADAAHGHHD@Z
?PutText@ObTimeFld@@UAEXPBD@Z
?strGetText@ObTimeFld@@UAE?AVCString@@XZ
?SetEmpty@ObLongFld@@QAEXXZ
??1ObFunctionData@@UAE@XZ
?SetAuxData@ObStateWin@@UAEXAAUObAuxCtrlInfo@@@Z
?DisplayContextMenu@ObStateWin@@UAEXHIVCPoint@@@Z
?SetPosition@ObPanel@@EAEXVCPoint@@@Z
?SetSize@ObPanel@@EAEXVCSize@@@Z
?SetText@ObPanel@@EAEXPBD@Z
?Repaint@ObPanel@@UAEXXZ
?AddKeyBoardEvent@ObPanel@@QAEXJH@Z
?SetContextMenu@ObPanel@@QAEXHH@Z
?RegisterLogicalEvent@ObPanel@@QAEXHJ@Z
?LoadFields@HGrid@@QAEXH@Z
?AddEvent@ObPanel@@QAEXQAVObLogEvent@@@Z
?pBindControl@ObPanel@@IAEPAVObCtrl@@HHPAVHGrid@@@Z
?LoadControls@ObPanel@@QAEXXZ
?AddSpeedButton@ObPanel@@QAEXII@Z
?CreateToolbar@ObPanel@@QAEXPBD@Z
?SetState@ObStateWin@@QAEXI@Z
?Init@ObPanel@@QAEHW4ObWinType@@KKKW4PanelPlacement@1@H@Z
??0ObPanel@@QAE@QAVObFunctionData@@@Z
?strGetMaskedText@ObTimeStampFld@@UAE?AVCString@@PBD@Z
?fSetStateFromAS400@ObTimeStampFld@@UAEHPBDIHHD@Z
?strGetAS400StateDefault@ObTimeStampFld@@UAEPADPADAAHGHHD@Z
?PutText@ObTimeStampFld@@UAEXPBD@Z
?strGetText@ObTimeStampFld@@UAE?AVCString@@XZ
?strGetMaskedText@ObCharFld@@UAE?AVCString@@PBD@Z
?fSetStateFromAS400@ObCharFld@@UAEHPBDIHHD@Z
?strGetAS400StateDefault@ObCharFld@@UAEPADPADAAHGHHD@Z
?PutText@ObCharFld@@UAEXPBD@Z
?strGetText@ObCharFld@@UAE?AVCString@@XZ
?fSetStateFromAS400@ObDateFld@@UAEHPBDIHHD@Z
?iObCompString@@YAHPBD0@Z
?pszObTrimSpaces@@YAPADPAD@Z
?GetLength@ObString@@QBEHXZ
??1ObPanel@@UAE@XZ
?DDX@ObCtrl@@QAEHW4AccMode@@AAVObCharFld@@@Z
?DDX@ObCtrl@@QAEHW4AccMode@@AAVObDateFld@@@Z
?DDX@ObCtrl@@QAEHW4AccMode@@AAVObLongFld@@@Z
?EndAccess@HGrid@@QAEXW4AccMode@@@Z
?GetFieldAccMode@HGrid@@QAE?AW4AccMode@@W42@@Z
?StartAccess@HGrid@@QAEXW4AccMode@@@Z
?DDX@ObCtrl@@QAEHW4AccMode@@AAVObTimeFld@@@Z
?RunScript@ObActiveXAPI@@SAHHPBD@Z
?NameField@ObActiveXAPI@@SAXPAVObRTType@@PBD@Z
?CastFrom@ObCharFld@@QAEXAAVObLongFld@@@Z
?Log@ObMessage@@SAXKW4ObMsgType@ObMsg@@JVObString@@PBDZZ
?EndSetFocus@ObPanel@@QAEXXZ
?StartSetFocus@ObPanel@@QAEXXZ
?ObPanelHelp@ObPanel@@QAEXXZ
??1ObCtrObj@@UAE@XZ
?CastFrom@ObCharFld@@QAEXAAVObDateFld@@@Z
?SetEmpty@ObCharFld@@QAEXXZ
?IfEmpty@ObCharFld@@QBEHXZ
?IfEmpty@ObDateFld@@QBEHXZ
?SetMenuState@ObPanel@@QAEXHHHHH@Z
?EnableKeyBoardState@ObPanel@@QAEXJH@Z
??0ObDateFld@@QAE@PBDG@Z
?CastFrom@ObDateFld@@QAEXAAV1@@Z
?iObCompDate@@YAHAAVObDateFld@@0@Z
?ObMIx@@YAHHHAAVObString@@@Z
?Status@ObMessage@@SAXPBDZZ
?GetPanelCWndByName@ObPanelAPI@@SAPAVCWnd@@PBD@Z
?SetEmpty@ObDateFld@@QAEXXZ
?SetEmpty@ObTimeFld@@QAEXXZ
?Formatf@ObCharFld@@QAAXPBDZZ
?fGetNextSelected@HGrid@@QAEHXZ
?fGetFirstSelected@HGrid@@QAEHXZ
?AddFnc@ObRTDI@@SAXPAVObFunctionData@@HKPBD1W4ObFncTypeSys@@W4ObFncLanguageSys@@111W4ObSystemType@@PAX@Z
?AddVar@ObRTDI@@SAXPAVObFunctionData@@HKPBD1W4eVarClass@1@1G@Z
?AddFncVar@ObRTDI@@SAXPAVObFunctionData@@PAVObVariable@@HHG@Z
?AddVarFld@ObRTDI@@SAXPAVObVariable@@PAVObRTType@@HHW4eFldUsage@1@G@Z
?AddFld@ObRTDI@@SAXPAVObFunctionData@@HKPBD1W4FldType@@W4FldPCType@@W4FldAS400Type@@W4FldSQLType@@GGGG@Z
?strGetMaskedText@ObDateFld@@UAE?AVCString@@PBD@Z
??0ObDateFld@@QAE@HHHG@Z
?DeleteRTDIVarFldMapArray@ObVariable@@QAEXXZ
??0ObCharFld@@QAE@JHHGPBD000G@Z
??0ObFunctionData@@QAE@QAVObFncParameter@@QAVObLocalVariable@@PBD22II@Z
?IsValid@ObFunctionData@@SAHQAV1@IIPBDI@Z
?Entry@ObFunctionData@@QAEHXZ
?SetPanel@ObFunctionData@@QAEXQAVObPanel@@@Z
??0ObFncDataHandler@@QAE@QAVObFunctionData@@@Z
??1ObFncDataHandler@@QAE@XZ
?PrepareAPICall@ObUserAPI@@SAXPAVObFunctionData@@@Z
?Call@ObCallMgr@@SAXQAVObFunctionData@@QAVObParamVariable@@1HPBD2@Z
??4ObCharFld@@QAEABV0@ABV0@@Z
??0ObCharFld@@QAE@PBDG@Z
?Box@ObMessage@@SAHKIPBDZZ
?Return@ObFunctionData@@QAEXXZ
??4ObDateFld@@QAEABV0@ABV0@@Z
?CastFrom@ObCharFld@@QAEXAAV1@@Z
?TrapPanelEvent@ObPanelAPI@@SAXHPBD@Z
??4ObTimeFld@@QAEABV0@ABV0@@Z
??0ObLongFld@@QAE@JG@Z
??4ObLongFld@@QAEABV0@ABV0@@Z
?CastFrom@ObLongFld@@QAEXAAVObCharFld@@@Z
?StartPanel@ObPanel@@QAEXXZ
?strGetText@ObLongFld@@UAE?AVCString@@XZ
?PutText@ObLongFld@@UAEXPBD@Z
?strGetAS400StateDefault@ObLongFld@@UAEPADPADAAHGHHD@Z
?fSetStateFromAS400@ObLongFld@@UAEHPBDIHHD@Z
?CollateFieldStates@@YAHAAVObRTType@@0H@Z
?strGetMaskedText@ObLongFld@@UAE?AVCString@@PBD@Z
?strGetMaskedText@ObIntFld@@UAE?AVCString@@PBD@Z
?fSetStateFromAS400@ObIntFld@@UAEHPBDIHHD@Z
?strGetAS400StateDefault@ObIntFld@@UAEPADPADAAHGHHD@Z
?PutText@ObIntFld@@UAEXPBD@Z
?strGetText@ObIntFld@@UAE?AVCString@@XZ
?SetValue@ObPropertyAPI@@SAXPBD0HH@Z
??0ObIntFld@@QAE@FG@Z
?SetEmpty@ObIntFld@@QAEXXZ
?GetValue@ObPropertyAPI@@SAXAAVCString@@PBDHH@Z
?CastFrom@ObLongFld@@QAEXAAVObDateFld@@@Z
SendMessageA
FindWindowA
ord6199
ord1182
ord825
ord800
ord823
ord540
ord1636
ord2915
ord2614
ord3522
ord2864
ord4204
ord1168
ord2027
ord535
ord537
strlen
_purecall
memset
free
_initterm
malloc
_adjust_fdiv
GSSBFGT
ObGetVersionInfo
ObIsPlexFunction
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ