ObGetVersionInfo
ObIsPlexFunction
TMPPASIF
Static task
static1
Behavioral task
behavioral1
Sample
33339ed249df711549d54d054dccbd10N.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
33339ed249df711549d54d054dccbd10N.dll
Resource
win10v2004-20240704-en
Target
33339ed249df711549d54d054dccbd10N.exe
Size
22KB
MD5
33339ed249df711549d54d054dccbd10
SHA1
b600d497dd1b2940d530aed617d2c1e41cda5629
SHA256
67c3a6dd703cb3c6317ba8e4ad7324b5846c58a4d848b0ef732b1a88cd00c574
SHA512
2d7c7776553774baaed89acda0234b6dc6aaac47f226460e817d826112409cbddd881e8cc9326e73c7aa2874fb3997810ebdab5ef12d8c10ffe7d9fd6a2b32f8
SSDEEP
384:x1TmQ1kX6sJgF9F07h5AAuF9ZBJ9I423dJraAyUii6acgn:6Q1kwRI3T5ynfg
Checks for missing Authenticode signature.
resource |
---|
33339ed249df711549d54d054dccbd10N.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
??4ObCharFld@@QAEABV0@ABV0@@Z
??0ObCharFld@@QAE@PBDG@Z
?Return@ObFunctionData@@QAEXXZ
??4ObIntFld@@QAEABV0@ABV0@@Z
??4ObIntFld@@QAEXABVvioNumeric@@@Z
??4ObCharFld@@QAEXABVvioVarChar@@@Z
?GetColumn@ObViewIO@@QAEPAVvioType@@H@Z
?ObSetVioStatus@ObViewIO@@QAEHAAVObCharFld@@@Z
?SelectAndFetch@ObViewIO@@QAEHPAVObSQLStatement@@W4VIO_OP_CODE@@H@Z
??0ObSQLStatement@@QAE@PAD0@Z
??4vioNumeric@@QAEABVObIntFld@@ABV1@@Z
??4vioVarChar@@QAEXABVObCharFld@@@Z
?GetKeyColumn@ObViewIO@@QAEPAVvioType@@H@Z
?GetWrapper@ObViewDescription@@QAEPAVObViewIO@@PAVObFunctionData@@PBD@Z
?DeleteRTDIVarFldMapArray@ObVariable@@QAEXXZ
?AddVar@ObRTDI@@SAXPAVObFunctionData@@HKPBD1W4eVarClass@1@1G@Z
?AddFncVar@ObRTDI@@SAXPAVObFunctionData@@PAVObVariable@@HHG@Z
?AddVarFld@ObRTDI@@SAXPAVObVariable@@PAVObRTType@@HHW4eFldUsage@1@G@Z
?AddFld@ObRTDI@@SAXPAVObFunctionData@@HKPBD1W4FldType@@W4FldPCType@@W4FldAS400Type@@W4FldSQLType@@GGGG@Z
?SetEmpty@ObIntFld@@QAEXXZ
?strGetMaskedText@ObCharFld@@UAE?AVCString@@PBD@Z
?fSetStateFromAS400@ObCharFld@@UAEHPBDIHHD@Z
?strGetAS400StateDefault@ObCharFld@@UAEPADPADAAHGHHD@Z
?PutText@ObCharFld@@UAEXPBD@Z
?strGetText@ObCharFld@@UAE?AVCString@@XZ
?Init@ObString@@AAEXHJH@Z
?CollateFieldStates@@YAHAAVObRTType@@0H@Z
?iObCompString@@YAHPBD0@Z
?strGetText@ObIntFld@@UAE?AVCString@@XZ
?PutText@ObIntFld@@UAEXPBD@Z
?strGetAS400StateDefault@ObIntFld@@UAEPADPADAAHGHHD@Z
?fSetStateFromAS400@ObIntFld@@UAEHPBDIHHD@Z
?strGetMaskedText@ObIntFld@@UAE?AVCString@@PBD@Z
??0ObCharFld@@QAE@JHHGPBD000G@Z
??0ObFunctionData@@QAE@QAVObFncParameter@@QAVObLocalVariable@@PBD22II@Z
?IsValid@ObFunctionData@@SAHQAV1@IIPBDI@Z
?Entry@ObFunctionData@@QAEHXZ
??1ObFunctionData@@UAE@XZ
??0ObViewDescription@@QAE@PBDW4VIO_ACCESS_TYPE@@HH0@Z
??0ObSQLCol@@QAE@XZ
?Init@ObSQLCol@@QAEXPAVObViewDescription@@PBD1W4VIO_TYPE@@JJFHF@Z
??1ObViewDescription@@UAE@XZ
??1ObSQLCol@@UAE@XZ
??0ObFncDataHandler@@QAE@QAVObFunctionData@@@Z
?AddFnc@ObRTDI@@SAXPAVObFunctionData@@HKPBD1W4ObFncTypeSys@@W4ObFncLanguageSys@@111W4ObSystemType@@PAX@Z
??1ObFncDataHandler@@QAE@XZ
ord1168
ord823
ord825
ord800
ord540
ord1182
memset
??1type_info@@UAE@XZ
__CxxFrameHandler
free
_initterm
malloc
_adjust_fdiv
_purecall
ObGetVersionInfo
ObIsPlexFunction
TMPPASIF
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ