ObGetVersionInfo
ObIsPlexFunction
VOIDEDRECEIPTS
Static task
static1
Behavioral task
behavioral1
Sample
037b3584b2f396d8371b3c77a0ad0410N.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
037b3584b2f396d8371b3c77a0ad0410N.dll
Resource
win10v2004-20240709-en
Target
037b3584b2f396d8371b3c77a0ad0410N.exe
Size
558KB
MD5
037b3584b2f396d8371b3c77a0ad0410
SHA1
297adc6ae4a41c4d69aeb0a39988bbd2625413f0
SHA256
dd18d79dd833458644515930ae59a63edff1fbdd5a32c3ddd445dd5cd53b9196
SHA512
5c8ea8208d50b9c8aa5310832873e8cc2b4c197d238f3ebe60106642263c51c34b29079f02d736f0e721acc06eb148812f5921fd0d0d887f57a6e756623bdab0
SSDEEP
6144:/PF6jJ+4Ai+l7ETn367YEssOMeZiIg1husCiMmmA6PZL8maGn0DVemPH0Hj3ZSX:Vh4i7IViIg1pzmC6S
Checks for missing Authenticode signature.
resource |
---|
037b3584b2f396d8371b3c77a0ad0410N.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?ChildPanelOptions@ObPanel@@QAEXHHH@Z
??0ObPanel@@QAE@QAVObFunctionData@@@Z
?Log@ObMessage@@SAXKW4ObMsgType@ObMsg@@JVObString@@PBDZZ
?Status@ObMessage@@SAXPBDZZ
?Box@ObMessage@@SAHKIPBDZZ
?GetPanelCWndByName@ObPanelAPI@@SAPAVCWnd@@PBD@Z
?GetCWinApp@ObAppAPI@@SAPAVCWinApp@@XZ
?CastFrom@ObLongFld@@QAEXAAVObCharFld@@@Z
??4ObIntFld@@QAEABV0@ABV0@@Z
??0ObIntFld@@QAE@FG@Z
?GetText@ObCharFld@@QBEPADXZ
??4ObVariantFld@@QAEABV0@ABVObLongFld@@@Z
??4ObVariantFld@@QAEABV0@ABVObCharFld@@@Z
?CastFrom@ObVariantFld@@QAEXAAVObDateFld@@@Z
?CastFrom@ObVariantFld@@QAEXAAVObCharFld@@@Z
??0ObLongFld@@QAE@ABV0@@Z
?CastFrom@ObLongFld@@QAEXAAVObIntFld@@@Z
??4ObIntFld@@QAEABV0@ABVObLongFld@@@Z
?CastFrom@ObLdblFld@@QAEXAAVObCharFld@@@Z
?IfEmpty@ObTimeFld@@QBEHXZ
?CastFrom@ObCharFld@@QAEXAAVObTimeFld@@@Z
?IfEmpty@ObDateFld@@QBEHXZ
?CastFrom@ObCharFld@@QAEXAAVObDateFld@@@Z
?IfEmpty@ObCharFld@@QBEHXZ
??0ObCharFld@@QAE@ABV0@@Z
??0ObDateFld@@QAE@PBDG@Z
??0ObDblFld@@QAE@NG@Z
?Return@ObFunctionData@@QAEXXZ
?EndSetFocus@ObPanel@@QAEXXZ
?EnableKeyBoardState@ObPanel@@QAEXJH@Z
??8ObDateFld@@QAEHABUtagODBCDATE@@@Z
?fGetFirstSelected@HGrid@@QAEHXZ
??0ObTimeFld@@QAE@PBDG@Z
?SetEmpty@ObTimeFld@@QAEXXZ
?SetEmpty@ObDateFld@@QAEXXZ
??0ObRCDATA@@QAE@PAVObPanel@@H@Z
?CastFrom@ObTimeFld@@QAEXAAVObCharFld@@@Z
?CastFrom@ObDateFld@@QAEXAAVObCharFld@@@Z
?fGetNextSelected@HGrid@@QAEHXZ
??1ObFunctionData@@UAE@XZ
?Entry@ObFunctionData@@QAEHXZ
?IsValid@ObFunctionData@@SAHQAV1@IIPBDI@Z
?AddEvent@ObPanel@@QAEXQAVObLogEvent@@@Z
?fGetFirstRecord@HGrid@@QAEHXZ
??1ObFncDataHandler@@QAE@XZ
?StartPanel@ObPanel@@QAEXXZ
??0ObFncDataHandler@@QAE@QAVObFunctionData@@@Z
?SetPanel@ObFunctionData@@QAEXQAVObPanel@@@Z
?LoadFields@HGrid@@QAEXH@Z
?RegisterLogicalEvent@ObPanel@@QAEXHJ@Z
?SetContextMenu@ObPanel@@QAEXHH@Z
?AddKeyBoardEvent@ObPanel@@QAEXJH@Z
??1ObPanel@@UAE@XZ
?Repaint@ObPanel@@UAEXXZ
?SetText@ObPanel@@EAEXPBD@Z
?SetSize@ObPanel@@EAEXVCSize@@@Z
?SetPosition@ObPanel@@EAEXVCPoint@@@Z
?DisplayContextMenu@ObStateWin@@UAEXHIVCPoint@@@Z
?SetAuxData@ObStateWin@@UAEXAAUObAuxCtrlInfo@@@Z
??0ObVariantFld@@QAE@XZ
??1ObVariantFld@@UAE@XZ
??0ObCharFld@@QAE@JHHGPBD000G@Z
?CastFrom@ObCharFld@@QAEXAAV1@@Z
?TrimSpaces@ObCharFld@@QAEXXZ
??0ObCharFld@@QAE@PBDG@Z
??4ObTimeFld@@QAEABV0@ABV0@@Z
?pszObTrimSpaces@@YAPADPAD@Z
?iObCompString@@YAHPBD0@Z
??4ObLongFld@@QAEABV0@ABV0@@Z
??0ObComFld@@QAE@U_GUID@@@Z
?pGetData@ObRCDATA@@QAEPADXZ
?Init@ObPanel@@QAEHW4ObWinType@@KKKW4PanelPlacement@1@H@Z
??1ObRCDATA@@QAE@XZ
?LoadControls@ObPanel@@QAEXXZ
??0ObComFld@@QAE@U_GUID@@0@Z
??4ObDateFld@@QAEABV0@ABV0@@Z
?SetEmpty@ObCharFld@@QAEXXZ
?GetValue@ObPropertyAPI@@SAXAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBDHH@Z
?CastFrom@ObLongFld@@QAEXAAVObDateFld@@@Z
?CastFrom@ObDateFld@@QAEXAAVObLongFld@@@Z
??4ObLongFld@@QAEABV0@ABVObIntFld@@@Z
??0ObLdblFld@@QAE@OG@Z
??4ObLongFld@@QAEABV0@ABVObLdblFld@@@Z
??4ObLdblFld@@QAEABV0@ABVObLongFld@@@Z
?ProcessHResult@ObComFld@@IAEXPAVObFunctionData@@@Z
??4ObCharFld@@QAEABV0@ABVObVariantFld@@@Z
?pGetBSTR@ObVariantFld@@QAEPAPAGXZ
?GetBSTR@ObVariantFld@@QAEPAGXZ
??4ObVariantFld@@QAEABV0@ABV0@@Z
?CastFrom@ObVariantFld@@QAEXAAV1@@Z
?GetLong@ObVariantFld@@QAEJXZ
?CastFrom@ObVariantFld@@QAEXAAVObLongFld@@@Z
??4ObLongFld@@QAEABV0@ABVObVariantFld@@@Z
?pGetLong@ObVariantFld@@QAEPAJXZ
??4ObByteFld@@QAEABV0@ABVObVariantFld@@@Z
?CastFrom@ObVariantFld@@QAEXAAVObByteFld@@@Z
?PrepareAPICall@ObUserAPI@@SAXPAVObFunctionData@@@Z
?SetValue@ObPropertyAPI@@SAXPBD0HH@Z
?SetState@ObStateWin@@QAEXI@Z
?StartAccess@HGrid@@QAEXW4AccMode@@@Z
?GetFieldAccMode@HGrid@@QAE?AW4AccMode@@W42@@Z
?EndAccess@HGrid@@QAEXW4AccMode@@@Z
??0ObDateFld@@QAE@HHHG@Z
??0ObTimeFld@@QAE@HHHG@Z
??0ObTimeStampFld@@QAE@HHHHHHJG@Z
?ConcatCopy@ObString@@IAEXHPBDH0@Z
?GetLength@ObString@@QBEHXZ
??1ObComFld@@QAE@XZ
?SetInterface@ObComFld@@UAEXPAUIUnknown@@@Z
?GetIUnknown@ObComFld@@UAEJAAPAUIUnknown@@@Z
?isLicensed@ObComFld@@UAEHXZ
?GetLicenseKey@ObComFld@@UAEPAGXZ
?CreateInstance@ObComFld@@UAEJPBD0PAVObFunctionData@@@Z
?CastFrom@ObComFld@@UAEJAAVObVariantFld@@@Z
?CastFrom@ObComFld@@UAEJPAUIUnknown@@@Z
?CastFrom@ObComFld@@UAEJAAV1@@Z
?CompareEqual@ObComFld@@UAE_NAAV1@@Z
?CompareNotEqual@ObComFld@@UAE_NAAV1@@Z
?CheckInterface@ObComFld@@UAE_NXZ
?MapEvent@ObComFld@@UAEXPAVObFunctionData@@U_GUID@@JJPAVObVariable@@@Z
?AddFld@ObRTDI@@SAXPAVObFunctionData@@HKPBD1W4FldType@@W4FldPCType@@W4FldAS400Type@@W4FldSQLType@@GGGG@Z
?AddVarFld@ObRTDI@@SAXPAVObVariable@@PAVObRTType@@HHW4eFldUsage@1@G@Z
?AddFncVar@ObRTDI@@SAXPAVObFunctionData@@PAVObVariable@@HHG@Z
?AddVar@ObRTDI@@SAXPAVObFunctionData@@HKPBD1W4eVarClass@1@1G@Z
?AddFnc@ObRTDI@@SAXPAVObFunctionData@@HKPBD1W4ObFncTypeSys@@W4ObFncLanguageSys@@111W4ObSystemType@@PAX@Z
?pszGetResourceString@@YAPBDIPAVObPanel@@@Z
?Formatf@ObCharFld@@QAAXPBDZZ
??4ObCharFld@@QAEABV0@ABV0@@Z
?Call@ObCallMgr@@SAXQAVObFunctionData@@QAVObParamVariable@@1HPBD2@Z
?StartSetFocus@ObPanel@@QAEXXZ
??1ObCtrObj@@UAE@XZ
?DeleteRTDIVarFldMapArray@ObVariable@@QAEXXZ
?strGetText@ObCharFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?PutText@ObCharFld@@UAEXPBD@Z
?strGetAS400StateDefault@ObCharFld@@UAEPADPADAAHGHHD@Z
?fSetStateFromAS400@ObCharFld@@UAEHPBDIHHD@Z
?strGetMaskedText@ObCharFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
?iObCompDate@@YAHAAVObDateFld@@0@Z
?strGetText@ObTimeStampFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?PutText@ObTimeStampFld@@UAEXPBD@Z
?strGetAS400StateDefault@ObTimeStampFld@@UAEPADPADAAHGHHD@Z
?fSetStateFromAS400@ObTimeStampFld@@UAEHPBDIHHD@Z
?strGetMaskedText@ObTimeStampFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
?strGetText@ObTimeFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?PutText@ObTimeFld@@UAEXPBD@Z
?strGetAS400StateDefault@ObTimeFld@@UAEPADPADAAHGHHD@Z
?fSetStateFromAS400@ObTimeFld@@UAEHPBDIHHD@Z
?strGetMaskedText@ObTimeFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
?strGetText@ObDateFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?PutText@ObDateFld@@UAEXPBD@Z
?strGetAS400StateDefault@ObDateFld@@UAEPADPADAAHGHHD@Z
?fSetStateFromAS400@ObDateFld@@UAEHPBDIHHD@Z
?strGetMaskedText@ObDateFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
?DDX@ObCtrl@@QAEHW4AccMode@@AAVObTimeFld@@@Z
?DDX@ObCtrl@@QAEHW4AccMode@@AAVObDateFld@@@Z
?DDX@ObCtrl@@QAEHW4AccMode@@AAVObCharFld@@@Z
?CollateFieldStates@@YAHAAVObRTType@@0H@Z
??0ObLongFld@@QAE@JG@Z
?strGetText@ObLdblFld@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@H@Z
?SetEmpty@ObLdblFld@@QAEXXZ
?PutText@ObLdblFld@@UAEXPBD@Z
?strGetAS400StateDefault@ObLdblFld@@UAEPADPADAAHGHHD@Z
?fSetStateFromAS400@ObLdblFld@@UAEHPBDIHHD@Z
?strGetMaskedText@ObLdblFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
?strGetText@ObDblFld@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@H@Z
?PutText@ObDblFld@@UAEXPBD@Z
?strGetAS400StateDefault@ObDblFld@@UAEPADPADAAHGHHD@Z
?fSetStateFromAS400@ObDblFld@@UAEHPBDIHHD@Z
?strGetMaskedText@ObDblFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
?SetEmpty@ObLongFld@@QAEXXZ
?strGetText@ObLongFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?PutText@ObLongFld@@UAEXPBD@Z
?strGetAS400StateDefault@ObLongFld@@UAEPADPADAAHGHHD@Z
?fSetStateFromAS400@ObLongFld@@UAEHPBDIHHD@Z
?strGetMaskedText@ObLongFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
?pBindControl@ObPanel@@IAEPAVObCtrl@@HHPAVHGrid@@@Z
?SetEmpty@ObIntFld@@QAEXXZ
?strGetText@ObIntFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?PutText@ObIntFld@@UAEXPBD@Z
?strGetAS400StateDefault@ObIntFld@@UAEPADPADAAHGHHD@Z
?fSetStateFromAS400@ObIntFld@@UAEHPBDIHHD@Z
?strGetMaskedText@ObIntFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
?SetEmpty@ObByteFld@@QAEXXZ
?strGetText@ObByteFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?PutText@ObByteFld@@UAEXPBD@Z
?strGetAS400StateDefault@ObByteFld@@UAEPADPADAAHGHHD@Z
?fSetStateFromAS400@ObByteFld@@UAEHPBDIHHD@Z
?strGetMaskedText@ObByteFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
?CheckLength@ObString@@AAEXXZ
?Init@ObString@@AAEXHJH@Z
?ObMIx@@YAHHHAAVObString@@@Z
??0ObFunctionData@@QAE@QAVObFncParameter@@QAVObLocalVariable@@PBD22II@Z
?ClearCreationDetails@ObComFld@@QAEXXZ
GetVersionExA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
ExitProcess
DeleteCriticalSection
InitializeCriticalSection
InterlockedDecrement
LocalFree
LoadLibraryA
GetProcAddress
GlobalFree
GlobalUnlock
GetTickCount
DeleteDC
CoInitialize
ord1098
ord1084
ord605
ord578
ord310
ord297
ord304
ord266
ord6090
ord5833
ord781
ord6174
ord6180
ord386
ord2280
ord1440
ord631
ord508
ord2034
ord2630
ord2677
ord3092
ord2635
ord2571
ord4085
ord3389
ord6067
ord2131
ord6118
ord2933
ord299
ord2902
ord1489
ord876
ord762
ord265
ord764
ord5154
ord2468
ord2475
malloc
free
_except_handler3
__CxxFrameHandler
memcpy
memset
strlen
_makepath
_splitpath
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_initterm
_adjust_fdiv
__CppXcptFilter
__security_error_handler
__dllonexit
_onexit
_CxxThrowException
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
SysFreeString
VariantCopy
VariantInit
VariantClear
GetErrorInfo
SysAllocString
ObGetVersionInfo
ObIsPlexFunction
VOIDEDRECEIPTS
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ