GREENVILLEPARKING
ObGetVersionInfo
ObIsPlexFunction
Static task
static1
Behavioral task
behavioral1
Sample
38ab8b3528ea1aca20e2060835e51740N.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
38ab8b3528ea1aca20e2060835e51740N.dll
Resource
win10v2004-20240709-en
Target
38ab8b3528ea1aca20e2060835e51740N.exe
Size
564KB
MD5
38ab8b3528ea1aca20e2060835e51740
SHA1
7bfec6b07948e9fe4995f714845aa099d93f2036
SHA256
6247b6ca9b44d99173cb13c6d96f32d885900c4cb96b5365d0ae6b9885256e5c
SHA512
6f56108691c43f24c47ad2daf973f2dfdddc68091a9964ca20b4ae95b81f06b91f17b7723990cbf6ee8b951539aab91641549191b32128007ce1d8f1235ad956
SSDEEP
6144:ziKNEFPgbBPForYkni1S/OFUE28Oi87Chx6PZL8maGstJTxzQPLFpFqW:2KB1PmNJE28g7ChGPZpFqW
Checks for missing Authenticode signature.
resource |
---|
38ab8b3528ea1aca20e2060835e51740N.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?pGetData@ObRCDATA@@QAEPADXZ
??0ObRCDATA@@QAE@PAVObPanel@@H@Z
?ChildPanelOptions@ObPanel@@QAEXHHH@Z
??0ObPanel@@QAE@QAVObFunctionData@@@Z
?Log@ObMessage@@SAXKW4ObMsgType@ObMsg@@JVObString@@PBDZZ
?Status@ObMessage@@SAXPBDZZ
?Box@ObMessage@@SAHKIPBDZZ
?GetPanelCWndByName@ObPanelAPI@@SAPAVCWnd@@PBD@Z
?GetCWinApp@ObAppAPI@@SAPAVCWinApp@@XZ
?CastFrom@ObLongFld@@QAEXAAVObCharFld@@@Z
?GetText@ObCharFld@@QBEPADXZ
??4ObVariantFld@@QAEABV0@ABVObLongFld@@@Z
?CastFrom@ObVariantFld@@QAEXAAVObDateFld@@@Z
?CastFrom@ObVariantFld@@QAEXAAVObCharFld@@@Z
??4ObVariantFld@@QAEABV0@ABVObCharFld@@@Z
??0ObLongFld@@QAE@ABV0@@Z
?CastFrom@ObLongFld@@QAEXAAVObIntFld@@@Z
??4ObIntFld@@QAEABV0@ABVObLongFld@@@Z
?CastFrom@ObLdblFld@@QAEXAAVObCharFld@@@Z
?IfEmpty@ObTimeFld@@QBEHXZ
?CastFrom@ObCharFld@@QAEXAAVObTimeFld@@@Z
?IfEmpty@ObDateFld@@QBEHXZ
?CastFrom@ObCharFld@@QAEXAAVObDateFld@@@Z
?IfEmpty@ObCharFld@@QBEHXZ
??0ObCharFld@@QAE@ABV0@@Z
??0ObDateFld@@QAE@PBDG@Z
??0ObDblFld@@QAE@NG@Z
?Return@ObFunctionData@@QAEXXZ
?EndSetFocus@ObPanel@@QAEXXZ
?EnableKeyBoardState@ObPanel@@QAEXJH@Z
??8ObDateFld@@QAEHABUtagODBCDATE@@@Z
?fGetFirstSelected@HGrid@@QAEHXZ
??0ObTimeFld@@QAE@PBDG@Z
?SetEmpty@ObTimeFld@@QAEXXZ
?SetEmpty@ObDateFld@@QAEXXZ
?Init@ObPanel@@QAEHW4ObWinType@@KKKW4PanelPlacement@1@H@Z
?CastFrom@ObTimeFld@@QAEXAAVObCharFld@@@Z
?CastFrom@ObDateFld@@QAEXAAVObCharFld@@@Z
?fGetNextSelected@HGrid@@QAEHXZ
??1ObFunctionData@@UAE@XZ
?Entry@ObFunctionData@@QAEHXZ
?IsValid@ObFunctionData@@SAHQAV1@IIPBDI@Z
?RegisterLogicalEvent@ObPanel@@QAEXHJ@Z
?fGetFirstRecord@HGrid@@QAEHXZ
??1ObFncDataHandler@@QAE@XZ
?StartPanel@ObPanel@@QAEXXZ
??0ObFncDataHandler@@QAE@QAVObFunctionData@@@Z
?SetPanel@ObFunctionData@@QAEXQAVObPanel@@@Z
?SetContextMenu@ObPanel@@QAEXHH@Z
?AddKeyBoardEvent@ObPanel@@QAEXJH@Z
??1ObPanel@@UAE@XZ
?Repaint@ObPanel@@UAEXXZ
?SetText@ObPanel@@EAEXPBD@Z
?SetSize@ObPanel@@EAEXVCSize@@@Z
?SetPosition@ObPanel@@EAEXVCPoint@@@Z
?DisplayContextMenu@ObStateWin@@UAEXHIVCPoint@@@Z
?SetAuxData@ObStateWin@@UAEXAAUObAuxCtrlInfo@@@Z
??0ObVariantFld@@QAE@XZ
??1ObVariantFld@@UAE@XZ
??0ObCharFld@@QAE@JHHGPBD000G@Z
?TrimSpaces@ObCharFld@@QAEXXZ
??4ObLongFld@@QAEABV0@ABV0@@Z
??0ObCharFld@@QAE@PBDG@Z
??4ObTimeFld@@QAEABV0@ABV0@@Z
?pszObTrimSpaces@@YAPADPAD@Z
?iObCompString@@YAHPBD0@Z
??0ObComFld@@QAE@U_GUID@@@Z
??0ObComFld@@QAE@U_GUID@@0@Z
??4ObDateFld@@QAEABV0@ABV0@@Z
?CastFrom@ObCharFld@@QAEXAAV1@@Z
??1ObRCDATA@@QAE@XZ
?LoadControls@ObPanel@@QAEXXZ
?pBindControl@ObPanel@@IAEPAVObCtrl@@HHPAVHGrid@@@Z
?AddEvent@ObPanel@@QAEXQAVObLogEvent@@@Z
?NameField@ObActiveXAPI@@SAXPAVObRTType@@PBD@Z
?RunScript@ObActiveXAPI@@SAHHPBD@Z
??0ObIntFld@@QAE@FG@Z
??4ObIntFld@@QAEABV0@ABV0@@Z
?CastFrom@ObLongFld@@QAEXAAVObDateFld@@@Z
?CastFrom@ObDateFld@@QAEXAAVObLongFld@@@Z
??4ObLongFld@@QAEABV0@ABVObIntFld@@@Z
??0ObLdblFld@@QAE@OG@Z
??4ObLongFld@@QAEABV0@ABVObLdblFld@@@Z
??4ObLdblFld@@QAEABV0@ABVObLongFld@@@Z
?ProcessHResult@ObComFld@@IAEXPAVObFunctionData@@@Z
??4ObCharFld@@QAEABV0@ABVObVariantFld@@@Z
?pGetBSTR@ObVariantFld@@QAEPAPAGXZ
?GetBSTR@ObVariantFld@@QAEPAGXZ
??4ObVariantFld@@QAEABV0@ABV0@@Z
?CastFrom@ObVariantFld@@QAEXAAV1@@Z
?GetLong@ObVariantFld@@QAEJXZ
?CastFrom@ObVariantFld@@QAEXAAVObLongFld@@@Z
??4ObLongFld@@QAEABV0@ABVObVariantFld@@@Z
?pGetLong@ObVariantFld@@QAEPAJXZ
??4ObByteFld@@QAEABV0@ABVObVariantFld@@@Z
?CastFrom@ObVariantFld@@QAEXAAVObByteFld@@@Z
?SetEmpty@ObCharFld@@QAEXXZ
?GetValue@ObPropertyAPI@@SAXAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBDHH@Z
?PrepareAPICall@ObUserAPI@@SAXPAVObFunctionData@@@Z
?SetValue@ObPropertyAPI@@SAXPBD0HH@Z
?SetState@ObStateWin@@QAEXI@Z
?StartAccess@HGrid@@QAEXW4AccMode@@@Z
?GetFieldAccMode@HGrid@@QAE?AW4AccMode@@W42@@Z
?EndAccess@HGrid@@QAEXW4AccMode@@@Z
??0ObDateFld@@QAE@HHHG@Z
??0ObTimeFld@@QAE@HHHG@Z
??0ObTimeStampFld@@QAE@HHHHHHJG@Z
?ConcatCopy@ObString@@IAEXHPBDH0@Z
?GetLength@ObString@@QBEHXZ
??1ObComFld@@QAE@XZ
?SetInterface@ObComFld@@UAEXPAUIUnknown@@@Z
?GetIUnknown@ObComFld@@UAEJAAPAUIUnknown@@@Z
?isLicensed@ObComFld@@UAEHXZ
?GetLicenseKey@ObComFld@@UAEPAGXZ
?CreateInstance@ObComFld@@UAEJPBD0PAVObFunctionData@@@Z
?CastFrom@ObComFld@@UAEJAAVObVariantFld@@@Z
?CastFrom@ObComFld@@UAEJPAUIUnknown@@@Z
?CastFrom@ObComFld@@UAEJAAV1@@Z
?CompareEqual@ObComFld@@UAE_NAAV1@@Z
?CompareNotEqual@ObComFld@@UAE_NAAV1@@Z
?CheckInterface@ObComFld@@UAE_NXZ
?MapEvent@ObComFld@@UAEXPAVObFunctionData@@U_GUID@@JJPAVObVariable@@@Z
?AddFld@ObRTDI@@SAXPAVObFunctionData@@HKPBD1W4FldType@@W4FldPCType@@W4FldAS400Type@@W4FldSQLType@@GGGG@Z
?AddVarFld@ObRTDI@@SAXPAVObVariable@@PAVObRTType@@HHW4eFldUsage@1@G@Z
?AddFncVar@ObRTDI@@SAXPAVObFunctionData@@PAVObVariable@@HHG@Z
?AddVar@ObRTDI@@SAXPAVObFunctionData@@HKPBD1W4eVarClass@1@1G@Z
?AddFnc@ObRTDI@@SAXPAVObFunctionData@@HKPBD1W4ObFncTypeSys@@W4ObFncLanguageSys@@111W4ObSystemType@@PAX@Z
?pszGetResourceString@@YAPBDIPAVObPanel@@@Z
?Formatf@ObCharFld@@QAAXPBDZZ
??4ObCharFld@@QAEABV0@ABV0@@Z
?Call@ObCallMgr@@SAXQAVObFunctionData@@QAVObParamVariable@@1HPBD2@Z
?StartSetFocus@ObPanel@@QAEXXZ
??1ObCtrObj@@UAE@XZ
?DeleteRTDIVarFldMapArray@ObVariable@@QAEXXZ
?strGetText@ObCharFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?PutText@ObCharFld@@UAEXPBD@Z
?strGetAS400StateDefault@ObCharFld@@UAEPADPADAAHGHHD@Z
?fSetStateFromAS400@ObCharFld@@UAEHPBDIHHD@Z
?strGetMaskedText@ObCharFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
?iObCompDate@@YAHAAVObDateFld@@0@Z
?strGetText@ObTimeStampFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?PutText@ObTimeStampFld@@UAEXPBD@Z
?strGetAS400StateDefault@ObTimeStampFld@@UAEPADPADAAHGHHD@Z
?fSetStateFromAS400@ObTimeStampFld@@UAEHPBDIHHD@Z
?strGetMaskedText@ObTimeStampFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
?strGetText@ObTimeFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?PutText@ObTimeFld@@UAEXPBD@Z
?strGetAS400StateDefault@ObTimeFld@@UAEPADPADAAHGHHD@Z
?fSetStateFromAS400@ObTimeFld@@UAEHPBDIHHD@Z
?strGetMaskedText@ObTimeFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
?strGetText@ObDateFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?PutText@ObDateFld@@UAEXPBD@Z
?strGetAS400StateDefault@ObDateFld@@UAEPADPADAAHGHHD@Z
?fSetStateFromAS400@ObDateFld@@UAEHPBDIHHD@Z
?strGetMaskedText@ObDateFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
?DDX@ObCtrl@@QAEHW4AccMode@@AAVObTimeFld@@@Z
?DDX@ObCtrl@@QAEHW4AccMode@@AAVObDateFld@@@Z
?DDX@ObCtrl@@QAEHW4AccMode@@AAVObCharFld@@@Z
?CollateFieldStates@@YAHAAVObRTType@@0H@Z
??0ObLongFld@@QAE@JG@Z
?strGetText@ObLdblFld@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@H@Z
?SetEmpty@ObLdblFld@@QAEXXZ
?PutText@ObLdblFld@@UAEXPBD@Z
?strGetAS400StateDefault@ObLdblFld@@UAEPADPADAAHGHHD@Z
?fSetStateFromAS400@ObLdblFld@@UAEHPBDIHHD@Z
?strGetMaskedText@ObLdblFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
?strGetText@ObDblFld@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@H@Z
?PutText@ObDblFld@@UAEXPBD@Z
?strGetAS400StateDefault@ObDblFld@@UAEPADPADAAHGHHD@Z
?fSetStateFromAS400@ObDblFld@@UAEHPBDIHHD@Z
?strGetMaskedText@ObDblFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
?SetEmpty@ObLongFld@@QAEXXZ
?strGetText@ObLongFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?PutText@ObLongFld@@UAEXPBD@Z
?strGetAS400StateDefault@ObLongFld@@UAEPADPADAAHGHHD@Z
?fSetStateFromAS400@ObLongFld@@UAEHPBDIHHD@Z
?strGetMaskedText@ObLongFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
?LoadFields@HGrid@@QAEXH@Z
?SetEmpty@ObIntFld@@QAEXXZ
?strGetText@ObIntFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?PutText@ObIntFld@@UAEXPBD@Z
?strGetAS400StateDefault@ObIntFld@@UAEPADPADAAHGHHD@Z
?fSetStateFromAS400@ObIntFld@@UAEHPBDIHHD@Z
?strGetMaskedText@ObIntFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
?SetEmpty@ObByteFld@@QAEXXZ
?strGetText@ObByteFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?PutText@ObByteFld@@UAEXPBD@Z
?strGetAS400StateDefault@ObByteFld@@UAEPADPADAAHGHHD@Z
?fSetStateFromAS400@ObByteFld@@UAEHPBDIHHD@Z
?strGetMaskedText@ObByteFld@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
?CheckLength@ObString@@AAEXXZ
?Init@ObString@@AAEXHJH@Z
?ObMIx@@YAHHHAAVObString@@@Z
??0ObFunctionData@@QAE@QAVObFncParameter@@QAVObLocalVariable@@PBD22II@Z
?ClearCreationDetails@ObComFld@@QAEXXZ
GetVersionExA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
ExitProcess
DeleteCriticalSection
InitializeCriticalSection
InterlockedDecrement
LocalFree
LoadLibraryA
GetProcAddress
GlobalFree
GlobalUnlock
GetTickCount
DeleteDC
CoInitialize
ord1098
ord1084
ord605
ord578
ord310
ord297
ord304
ord2475
ord2468
ord266
ord5833
ord781
ord6174
ord6180
ord386
ord2280
ord1440
ord631
ord508
ord2034
ord2630
ord2677
ord3092
ord2635
ord2571
ord4085
ord3389
ord6067
ord5403
ord6090
ord2131
ord6118
ord2933
ord299
ord2902
ord1489
ord876
ord762
ord265
ord764
ord5154
malloc
free
_except_handler3
__CxxFrameHandler
memcpy
memset
strlen
_chdir
_getcwd
_makepath
_splitpath
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_initterm
_adjust_fdiv
__CppXcptFilter
__security_error_handler
__dllonexit
_onexit
_CxxThrowException
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
SysFreeString
VariantCopy
VariantInit
VariantClear
GetErrorInfo
SysAllocString
GREENVILLEPARKING
ObGetVersionInfo
ObIsPlexFunction
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ