JEEGXF
ObGetVersionInfo
ObIsPlexFunction
Static task
static1
Behavioral task
behavioral1
Sample
ec7d79c43d50aa780dbb7a5e0898cebbbf1838594fef52d6b704a3d81009fcf7.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ec7d79c43d50aa780dbb7a5e0898cebbbf1838594fef52d6b704a3d81009fcf7.dll
Resource
win10v2004-20240419-en
Target
ec7d79c43d50aa780dbb7a5e0898cebbbf1838594fef52d6b704a3d81009fcf7
Size
185KB
MD5
eb353d778c3a649f0181c279a946e626
SHA1
2293728f9ee405fcc96a1612f8beb8a0e18652d7
SHA256
ec7d79c43d50aa780dbb7a5e0898cebbbf1838594fef52d6b704a3d81009fcf7
SHA512
91c8343b1ce6beb0ad4c254787c1320a0970d96d320609d0efc51fe43de0ff02c2ae53a64e5e65993e90052372e3723c1c5045ce246afa939bf79695e440a426
SSDEEP
3072:6BdRTdwcbBCDFOZqTWZuVOjT5DMFHGiGoyzycyQymyKyUyxymyTytgyLyumOI9Ph:6fbj9ZuM9GHyGB9bnZ0bmTeRPZQmaRwO
Checks for missing Authenticode signature.
resource |
---|
ec7d79c43d50aa780dbb7a5e0898cebbbf1838594fef52d6b704a3d81009fcf7 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?RegisterLogicalEvent@ObPanel@@QAEXHJ@Z
?LoadFields@HGrid@@QAEXH@Z
?pszGetResourceString@@YAPBDIPAVObPanel@@@Z
?AddEvent@ObPanel@@QAEXQAVObLogEvent@@@Z
?pBindControl@ObPanel@@IAEPAVObCtrl@@HHPAVHGrid@@@Z
?LoadControls@ObPanel@@QAEXXZ
??1ObRCDATA@@QAE@XZ
?Init@ObPanel@@QAEHW4ObWinType@@KKKW4PanelPlacement@1@H@Z
?pGetData@ObRCDATA@@QAEPADXZ
??0ObRCDATA@@QAE@PAVObPanel@@H@Z
??0ObPanel@@QAE@QAVObFunctionData@@@Z
?Log@ObMessage@@SAXKW4ObMsgType@ObMsg@@JVObString@@PBDZZ
?Status@ObMessage@@SAXPBDZZ
?Box@ObMessage@@SAHKIPBDZZ
?Call@ObCallMgr@@SAXQAVObFunctionData@@QAVObParamVariable@@1HPBD2@Z
?GetPanelCWndByName@ObPanelAPI@@SAPAVCWnd@@PBD@Z
?PrepareAPICall@ObUserAPI@@SAXPAVObFunctionData@@@Z
?Formatf@ObCharFld@@QAAXPBDZZ
?GetCWinApp@ObAppAPI@@SAPAVCWinApp@@XZ
?CastFrom@ObLongFld@@QAEXAAVObCharFld@@@Z
??4ObLongFld@@QAEABV0@ABV0@@Z
??4ObIntFld@@QAEABV0@ABV0@@Z
??0ObIntFld@@QAE@FG@Z
?SetEmpty@ObCharFld@@QAEXXZ
?SetAuxData@ObStateWin@@UAEXAAUObAuxCtrlInfo@@@Z
??4ObIntFld@@QAEABV0@ABVObLongFld@@@Z
??4ObDateFld@@QAEABV0@ABV0@@Z
?EndSetFocus@ObPanel@@QAEXXZ
?CastFrom@ObLongFld@@QAEXAAV1@@Z
?IfEmpty@ObLongFld@@QBEHXZ
?CastFrom@ObCharFld@@QAEXAAV1@@Z
?IfEmpty@ObCharFld@@QBEHXZ
?SetContextMenu@ObPanel@@QAEXHH@Z
?fGetFirstSelected@HGrid@@QAEHXZ
??1ObFunctionData@@UAE@XZ
?Entry@ObFunctionData@@QAEHXZ
?IsValid@ObFunctionData@@SAHQAV1@IIPBDI@Z
??0ObFunctionData@@QAE@QAVObFncParameter@@QAVObLocalVariable@@PBD22II@Z
?fGetNextSelected@HGrid@@QAEHXZ
?fGetFirstRecord@HGrid@@QAEHXZ
??4ObTimeFld@@QAEABV0@ABV0@@Z
??1ObFncDataHandler@@QAE@XZ
?StartPanel@ObPanel@@QAEXXZ
??0ObFncDataHandler@@QAE@QAVObFunctionData@@@Z
?SetPanel@ObFunctionData@@QAEXQAVObPanel@@@Z
??0ObLongFld@@QAE@GJJJJG@Z
??0ObCharFld@@QAE@JHHGPBD000G@Z
??0ObCharFld@@QAE@PBDG@Z
??4ObCharFld@@QAEABV0@ABV0@@Z
?iObCompString@@YAHPBD0@Z
?CollateFieldStates@@YAHAAVObRTType@@0H@Z
??0ObFixedDecImpl@@QAE@PBD@Z
?strGetText@ObFixedDecFld@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@H@Z
?PutText@ObFixedDecFld@@UAEXPBD@Z
?strGetAS400StateDefault@ObFixedDecFld@@UAEPADPADAAHGHHD@Z
?fSetStateFromAS400@ObFixedDecFld@@UAEHPBDIHHD@Z
?strGetMaskedText@ObFixedDecFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
?AddFld@ObRTDI@@SAXPAVObFunctionData@@HKPBD1W4FldType@@W4FldPCType@@W4FldAS400Type@@W4FldSQLType@@GGGG@Z
?AddVarFld@ObRTDI@@SAXPAVObVariable@@PAVObRTType@@HHW4eFldUsage@1@G@Z
?AddFncVar@ObRTDI@@SAXPAVObFunctionData@@PAVObVariable@@HHG@Z
?AddVar@ObRTDI@@SAXPAVObFunctionData@@HKPBD1W4eVarClass@1@1G@Z
?SetPosition@ObPanel@@EAEXVCPoint@@@Z
?EnableKeyBoardState@ObPanel@@QAEXJH@Z
?SetState@ObStateWin@@QAEXI@Z
?AddKeyBoardEvent@ObPanel@@QAEXJH@Z
??1ObPanel@@UAE@XZ
?Repaint@ObPanel@@UAEXXZ
?SetText@ObPanel@@EAEXPBD@Z
??4ObDblFld@@QAEABV0@ABV0@@Z
?iObCompDate@@YAHAAVObDateFld@@0@Z
?CastFrom@ObLongFld@@QAEXAAVObDateFld@@@Z
??4ObLongFld@@QAEABV0@ABVObIntFld@@@Z
??0ObDateFld@@QAE@PBDG@Z
?Return@ObFunctionData@@QAEXXZ
?StartAccess@HGrid@@QAEXW4AccMode@@@Z
?GetFieldAccMode@HGrid@@QAE?AW4AccMode@@W42@@Z
?EndAccess@HGrid@@QAEXW4AccMode@@@Z
??0ObDateFld@@QAE@HHHG@Z
??0ObTimeFld@@QAE@HHHG@Z
??0ObTimeStampFld@@QAE@HHHHHHJG@Z
?StartSetFocus@ObPanel@@QAEXXZ
??1ObCtrObj@@UAE@XZ
?DeleteRTDIVarFldMapArray@ObVariable@@QAEXXZ
?strGetText@ObCharFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?PutText@ObCharFld@@UAEXPBD@Z
?strGetAS400StateDefault@ObCharFld@@UAEPADPADAAHGHHD@Z
?fSetStateFromAS400@ObCharFld@@UAEHPBDIHHD@Z
?strGetMaskedText@ObCharFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
?strGetText@ObTimeStampFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?PutText@ObTimeStampFld@@UAEXPBD@Z
?strGetAS400StateDefault@ObTimeStampFld@@UAEPADPADAAHGHHD@Z
?fSetStateFromAS400@ObTimeStampFld@@UAEHPBDIHHD@Z
?strGetMaskedText@ObTimeStampFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
?strGetText@ObTimeFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?PutText@ObTimeFld@@UAEXPBD@Z
?strGetAS400StateDefault@ObTimeFld@@UAEPADPADAAHGHHD@Z
?fSetStateFromAS400@ObTimeFld@@UAEHPBDIHHD@Z
?strGetMaskedText@ObTimeFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
?strGetText@ObDateFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?PutText@ObDateFld@@UAEXPBD@Z
?strGetAS400StateDefault@ObDateFld@@UAEPADPADAAHGHHD@Z
?fSetStateFromAS400@ObDateFld@@UAEHPBDIHHD@Z
?strGetMaskedText@ObDateFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
??0ObLongFld@@QAE@JG@Z
?strGetText@ObDblFld@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@H@Z
?SetEmpty@ObDblFld@@QAEXXZ
?PutText@ObDblFld@@UAEXPBD@Z
?strGetAS400StateDefault@ObDblFld@@UAEPADPADAAHGHHD@Z
?fSetStateFromAS400@ObDblFld@@UAEHPBDIHHD@Z
?strGetMaskedText@ObDblFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
?SetEmpty@ObLongFld@@QAEXXZ
?strGetText@ObLongFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?PutText@ObLongFld@@UAEXPBD@Z
?strGetAS400StateDefault@ObLongFld@@UAEPADPADAAHGHHD@Z
?fSetStateFromAS400@ObLongFld@@UAEHPBDIHHD@Z
?strGetMaskedText@ObLongFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
?SetEmpty@ObIntFld@@QAEXXZ
?strGetText@ObIntFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?PutText@ObIntFld@@UAEXPBD@Z
?strGetAS400StateDefault@ObIntFld@@UAEPADPADAAHGHHD@Z
?fSetStateFromAS400@ObIntFld@@UAEHPBDIHHD@Z
?strGetMaskedText@ObIntFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
??1ObFixedDecImpl@@QAE@XZ
?CheckLength@ObString@@AAEXXZ
?Init@ObString@@AAEXHJH@Z
?SetSize@ObPanel@@EAEXVCSize@@@Z
?DDX@ObCtrl@@QAEHW4AccMode@@AAVObDblFld@@@Z
?DDX@ObCtrl@@QAEHW4AccMode@@AAVObDateFld@@@Z
?DDX@ObCtrl@@QAEHW4AccMode@@AAVObLongFld@@@Z
?DDX@ObCtrl@@QAEHW4AccMode@@AAVObCharFld@@@Z
?AddFnc@ObRTDI@@SAXPAVObFunctionData@@HKPBD1W4ObFncTypeSys@@W4ObFncLanguageSys@@111W4ObSystemType@@PAX@Z
?DisplayContextMenu@ObStateWin@@UAEXHIVCPoint@@@Z
?SetEmpty@ObDateFld@@QAEXXZ
?ObMIx@@YAHHHAAVObString@@@Z
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
DeleteCriticalSection
InitializeCriticalSection
LoadLibraryA
GetProcAddress
GetVersionExA
ord6090
ord5833
ord6067
ord876
ord2131
ord762
ord265
ord764
ord5154
ord2468
ord2475
ord304
ord297
ord310
ord578
ord1084
ord1098
malloc
free
_except_handler3
__CxxFrameHandler
memcpy
memset
strlen
_makepath
_splitpath
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_initterm
_adjust_fdiv
__CppXcptFilter
__security_error_handler
__dllonexit
_onexit
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
JEEGXF
ObGetVersionInfo
ObIsPlexFunction
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ