NEAS[.]13ff72bc454d87207b72803e5f54e300[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.13ff72bc454d87207b72803e5f54e300.exe
Size

51KB
MD5

13ff72bc454d87207b72803e5f54e300
SHA1

0f09ac963aff612dd0a5d8f3c8904eee05eb7cd2
SHA256

4ff8df5e997ca6f14b395f0ecc968fc01ed88f0d3232d1c0320d4186edf10aea
SHA512

ad90ad5bf072674c9ce384dbd88842292a984e1208fd8df4622a23d7dd52a343bb464f8fa98fbc7a2e502d67b4ca6a10e80ed3bc850303fd77e1e7c346e1c276
SSDEEP

768:HoMwxcqcDy4kAcyJsPoNhNXc2OfrdQYeBIinJv+9i:HoMw2qcDy4kAtBc2Of0BIiJG9i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.13ff72bc454d87207b72803e5f54e300.exe

Files

NEAS.13ff72bc454d87207b72803e5f54e300.exe
.dll windows:5 windows x86

53747c9c65d40ecfb3591dfc07972aa3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

tbgeneric

??0DataStr@@QAE@XZ
?SetUpperCase@DataObj@@QAEXH@Z
?GetThisClass@DataStr@@SGPAUCRuntimeClass@@XZ
?Clone@CFunctionDescription@@UAEPAV1@XZ
?GetTitle@CFunctionDescription@@UBE?BV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@XZ
?Find@Array@@UAEHPAVCObject@@H@Z
?IsElementEqual@Array@@UBEHPAVCObject@@0@Z
?Compare@Array@@UBEHPAVCObject@@0@Z
?LessThen@Array@@UBEHPAVCObject@@0@Z
?Serialize@Array@@UAEXAAVCArchive@@@Z
??0DataStr@@QAE@ABV0@@Z
??4DataStr@@QAEABV0@ABV0@@Z
??1DataStr@@UAE@XZ

tboledb

?IsValid@SqlConnection@@QBEHXZ
??1SqlRecord@@UAE@XZ
??0SqlRecord@@QAE@ABV0@@Z
?Create@SqlRecord@@UBEPAV1@XZ
?Clone@SqlRecord@@UAEPAV1@XZ
??4SqlRecord@@UAEAAV0@ABV0@@Z
??8SqlRecord@@UBEHABV0@@Z
??9SqlRecord@@UBEHABV0@@Z
?IsEmpty@SqlRecord@@UBEHXZ
?IsEqual@SqlRecord@@UBEHABV1@@Z
?IsPhisicalEqual@SqlRecord@@UBEHABV1@@Z
?Init@SqlRecord@@UAEXXZ
??0SqlRecord@@QAE@PBGPAVSqlConnection@@F_N@Z
?SelectAll@SqlTable@@QAEXXZ
?AddSortColumn@SqlTable@@QAEXABVDataObj@@H@Z
?AddFilterLike@SqlTable@@QAEXABVDataObj@@@Z
?AddParam@SqlRowSet@@QAEXABV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@ABVDataObj@@ABK@Z
?AddFilterColumn@SqlTable@@QAEXABVDataObj@@ABV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@@Z
?SetConnection@SqlRecord@@UAEXPAVSqlConnection@@@Z
?EndBindData@SqlRecord@@IAEXAAH@Z
?SetParamLike@SqlRowSet@@QAEXABV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@ABVDataObj@@@Z
?SetParamValue@SqlRowSet@@QAEXABV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@ABVDataObj@@@Z
?GetThisClass@SqlRecord@@SGPAUCRuntimeClass@@XZ
?BindDataObj@SqlRecord@@QAEXHABV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@AAVDataObj@@@Z
?RegisterCatalogEntry@SqlConnection@@QAEHPBGABVCTBNamespace@@PAUCRuntimeClass@@H@Z
?RemoveDisposingHandlers@SqlRecord@@UAEXPAVCObject@@@Z
?AddDisposingHandler@SqlRecord@@UAEXPAVCObject@@P82@AEX0@Z@Z
?GetTableName@SqlRecord@@UBEABV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@XZ
?GetColumnName@SqlRecord@@UBEABV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@PBVDataObj@@@Z
?GetDataObjFromColumnName@SqlRecord@@UAEPAVDataObj@@ABV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@@Z
?GetIndexFromColumnName@SqlRecord@@UBEHABV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@@Z
?OnExtraFiltering@SqlRecord@@UAEXAAV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@@Z
?EnableExtraFiltering@SqlRecord@@UAEXH@Z
?GetColumnLength@SqlRecord@@UBEJPBVDataObj@@@Z

tbges

?DoDefineQuery@HotKeyLink@@MAEXW4SelectionType@HotKeyLinkObj@@@Z
?DoPrepareQuery@HotKeyLink@@MAEXPAVDataObj@@W4SelectionType@HotKeyLinkObj@@@Z
?OnRecordAvailable@HotKeyLink@@MAEXXZ
?OnCallLink@HotKeyLink@@MAEXXZ
?IsValid@HotKeyLink@@MAEHXZ
?OnRecordNotFound@HotKeyLink@@MAE?AW4FindResult@1@XZ
?OnPreprocessDataObj@HotKeyLink@@MAEXPAVDataObj@@H@Z
?LoadSymbolTable@HotKeyLink@@MAEXXZ
?UpdateSymbolTable@HotKeyLink@@MAEXPAVSqlRecord@@@Z
?GetDbFieldValue@HotKeyLink@@UBEPAVDataObj@@PAVSqlRecord@@@Z
?FormatComboItem@HotKeyLink@@UAE?AV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@PAVSqlRecord@@@Z
?OnValidateRadarSelection@HotKeyLink@@UAEHPAVSqlRecord@@@Z
?RemovePrimaryKeyLike@HotKeyLink@@MAEHAAV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@V23@1PAVSqlTable@@@Z
?PrepareCustomize@HotKeyLink@@UAEXAAVDataObjArray@@@Z
?GetAuxInfoForHklBrowse@HotKeyLink@@UAEXAAPAX@Z
?SelectColumns@HotKeyLink@@UAEXPAVSqlTable@@W4SelectionType@HotKeyLinkObj@@@Z
?OnInit@HotKeyLink@@MAEXPAVFunctionDataInterface@@@Z
??1HotKeyLink@@UAE@XZ
?OnAssignSelectedValue@HotKeyLink@@UAEXPAVDataObj@@0@Z
?OnAfterLoadRadarColumns@HotKeyLink@@UAEXPAVITBRadar@@@Z
?GetThisClass@TableReader@@SGPAUCRuntimeClass@@XZ
??0TableReader@@QAE@PAUCRuntimeClass@@PAVCBaseDocument@@@Z
?FindRecord@TableReader@@UAE?AW4FindResult@1@XZ
?Free@TableReader@@MAEXXZ
?GetCursorType@TableReader@@MAE?AW4CursorType@@XZ
?GetQuery@HotKeyLink@@UAEPAVSqlParamArray@@W4SelectionType@HotKeyLinkObj@@AAV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@@Z
?SearchOnLink@HotKeyLink@@UAEHPAVDataObj@@W4SelectionType@HotKeyLinkObj@@@Z
?FindRecord@HotKeyLink@@UAE?AW4FindResult@1@PAVDataObj@@HHH@Z
?CloseTable@HotKeyLink@@UAEXXZ
?OnRadarRecordAvailable@HotKeyLink@@UAEXXZ
?DoContextMenuAction@HotKeyLink@@MAEXI@Z
?OnExtendContextMenu@HotKeyLink@@MAEXAAVCMenu@@@Z
?DoFindRecord@HotKeyLink@@UAEHPAVDataObj@@@Z
?GetField@HotKeyLink@@UAEPAVDataObj@@PBG@Z
?SetParamValue@HotKeyLink@@UAEXVDataStr@@PAVDataObj@@@Z
?GetNamespace@HotKeyLink@@UBEABVCTBNamespace@@XZ
?GetAddOnFlyNamespace@HotKeyLink@@UAE?BV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@XZ
?InitNamespace@HotKeyLink@@UAEXXZ
?BrowserLink@HotKeyLink@@UAEPAVCDocument@@PAVDataObj@@PAV2@PBUCRuntimeClass@@H@Z
?FindDataRecord@HotKeyLink@@EAEHPAVDataObj@@@Z
?SearchOnLinkLower@HotKeyLink@@MAEHXZ
??1TableReader@@UAE@XZ
?SearchOnLinkUpper@HotKeyLink@@MAEHXZ
?DoCallLink@HotKeyLink@@UAEXH@Z
?AttachDocument@HotKeyLink@@UAEXPAVCBaseDocument@@@Z
?DoSearchComboQueryData@HotKeyLink@@UAEHABHAAVDataObjArray@@AAVCStringArray@@@Z
?SearchComboQueryData@HotKeyLink@@UAEHABHAAVDataObjArray@@AAVCStringArray@@@Z
?StopRunning@HotKeyLink@@UAEXXZ
?ExistData@HotKeyLink@@UAEHPAVDataObj@@@Z
??0HotKeyLink@@QAE@PAUCRuntimeClass@@V?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@PAVSqlConnection@@@Z
?GetThisClass@HotKeyLink@@SGPAUCRuntimeClass@@XZ
?RemovePrimaryKeyLike@HotKeyLink@@MAEXPAVSqlTable@@PAVSqlRecord@@@Z
?GetSqlTable@HotKeyLink@@UAEPAVSqlTable@@XZ

tbgenlib

??1AddOnInterfaceObj@@UAE@XZ
?SetOwnerCtrl@HotKeyLinkObj@@UAEXPAVCParsedCtrl@@@Z
?CanDoSearchOnLink@HotKeyLinkObj@@UBEHXZ
?CanDoCallLink@HotKeyLinkObj@@MBEHXZ
?DispatchCustomize@HotKeyLinkObj@@UAEHABVDataObjArray@@@Z
?Customize@HotKeyLinkObj@@UAEHABVDataObjArray@@@Z
??1FunctionDataInterface@@UAE@XZ
?GetRuntimeClass@FunctionDataInterface@@UBEPAUCRuntimeClass@@XZ
??0FunctionDataInterface@@QAE@ABVCTBNamespace@@PAUCRuntimeClass@@1@Z
?DeclareFunction@AddOnInterfaceObj@@QAEXPAVFunctionDataInterface@@@Z
?AOI_EndRegistration@AddOnInterfaceObj@@UAEHABVCTBNamespace@@@Z
?AOI_BeginRegistration@AddOnInterfaceObj@@UAEHABVCTBNamespace@@@Z
?AOI_RegisterOSLObjects@AddOnInterfaceObj@@UAEHXZ
?AOI_AddOnNewColumns@AddOnInterfaceObj@@UAEXPAUCRuntimeClass@@PAVCRTAddOnNewFieldsArray@@ABV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@ABVCTBNamespace@@@Z
?AOI_RegisterFormatters@AddOnInterfaceObj@@UAEXABVCTBNamespace@@@Z
?AOI_AttachFamilyClientDocs@AddOnInterfaceObj@@UAEXPAVCAbstractFormDoc@@PAVCClientDocArray@@ABVCTBNamespace@@@Z
?AOI_AttachClientDocs@AddOnInterfaceObj@@UAEXPAVCAbstractFormDoc@@PAVCClientDocArray@@ABVCTBNamespace@@@Z
?AOI_RegisterParsedControls@AddOnInterfaceObj@@UAEXABVCTBNamespace@@@Z
?AOI_RegisterFunctions@AddOnInterfaceObj@@UAEXPAVCTBNamespace@@@Z
?AOI_RegisterTemplates@AddOnInterfaceObj@@UAEXIPAVCTBNamespace@@@Z
?AOI_RegisterGlobalObjects@AddOnInterfaceObj@@UAEXXZ
?AOI_SetAddOnMod@AddOnInterfaceObj@@UAEXXZ
?AOI_InitDLL@AddOnInterfaceObj@@UAEXXZ
?GetRuntimeClass@AddOnInterfaceObj@@UBEPAUCRuntimeClass@@XZ
??0AddOnInterfaceObj@@QAE@XZ
?AfxGetTbCmdManager@@YGPAVCTbCommandInterface@@XZ

tbnamesolver

?AreReleaseAssertionsEnabled@CApplicationContext@@QAEHXZ
?AfxGetApplicationContext@@YGPAVCApplicationContext@@XZ
?SetObjectName@CTBNamespace@@QAEXABW4NSObjectType@1@ABV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@HH@Z
??1CTBNamespace@@UAE@XZ
??0CTBNamespace@@QAE@ABV0@@Z
?AutoCompleteNamespace@CTBNamespace@@QAEHABW4NSObjectType@1@ABV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@ABV1@@Z
??0CTBNamespace@@QAE@ABW4NSObjectType@0@@Z
?AssertAlwaysFailedLine@CApplicationContext@@QAEHPBDK00H@Z

mfc100u

ord1300
ord286
ord902
ord2220
ord3996
ord266
ord7399
ord1934
ord1953
ord408
ord2053
ord1298

msvcr100

__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__CppXcptFilter
_amsg_exit
_initterm_e
__CxxFrameHandler3
_initterm
_encoded_null
free
_malloc_crt
?terminate@@YAXXZ
_unlock
_onexit
_lock
__dllonexit

kernel32

TerminateProcess
EncodePointer
DecodePointer
InterlockedExchange
Sleep
InterlockedCompareExchange
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCurrentThreadId

Exports

Exports

??0HKLCodiciASL@@QAE@XZ
??0HKLComuni@@QAE@XZ
??0HKLDitte@@QAE@XZ
??0HKLRegioni@@QAE@XZ
??0TCodiciASL@@QAE@ABV0@@Z
??0TCodiciASL@@QAE@H@Z
??0TComuni@@QAE@ABV0@@Z
??0TComuni@@QAE@H@Z
??0TComuniIndirizziAsl@@QAE@ABV0@@Z
??0TComuniIndirizziAsl@@QAE@H@Z
??0TDitta@@QAE@ABV0@@Z
??0TDitta@@QAE@H@Z
??0TRComuni@@QAE@PAVCAbstractFormDoc@@@Z
??0TRComuniIndirizziAsl@@QAE@PAVCAbstractFormDoc@@@Z
??0TRegioni@@QAE@ABV0@@Z
??0TRegioni@@QAE@H@Z
??1HKLCodiciASL@@UAE@XZ
??1HKLComuni@@UAE@XZ
??1HKLDitte@@UAE@XZ
??1HKLRegioni@@UAE@XZ
??1TCodiciASL@@UAE@XZ
??1TComuni@@UAE@XZ
??1TComuniIndirizziAsl@@UAE@XZ
??1TDitta@@UAE@XZ
??1TRComuni@@UAE@XZ
??1TRComuniIndirizziAsl@@UAE@XZ
??1TRegioni@@UAE@XZ
??4TCodiciASL@@QAEAAV0@ABV0@@Z
??4TComuni@@QAEAAV0@ABV0@@Z
??4TComuniIndirizziAsl@@QAEAAV0@ABV0@@Z
??4TDitta@@QAEAAV0@ABV0@@Z
??4TRegioni@@QAEAAV0@ABV0@@Z
??_7HKLCodiciASL@@6B@
??_7HKLComuni@@6B@
??_7HKLDitte@@6B@
??_7HKLRegioni@@6B@
??_7TCodiciASL@@6BArray@@@
??_7TCodiciASL@@6BIDisposingSource@@@
??_7TComuni@@6BArray@@@
??_7TComuni@@6BIDisposingSource@@@
??_7TComuniIndirizziAsl@@6BArray@@@
??_7TComuniIndirizziAsl@@6BIDisposingSource@@@
??_7TDitta@@6BArray@@@
??_7TDitta@@6BIDisposingSource@@@
??_7TRComuni@@6B@
??_7TRComuniIndirizziAsl@@6B@
??_7TRegioni@@6BArray@@@
??_7TRegioni@@6BIDisposingSource@@@
??_FTCodiciASL@@QAEXXZ
??_FTComuni@@QAEXXZ
??_FTComuniIndirizziAsl@@QAEXXZ
??_FTDitta@@QAEXXZ
??_FTRComuni@@QAEXXZ
??_FTRComuniIndirizziAsl@@QAEXXZ
??_FTRegioni@@QAEXXZ
?BindRecord@TCodiciASL@@UAEXXZ
?BindRecord@TComuni@@UAEXXZ
?BindRecord@TComuniIndirizziAsl@@UAEXXZ
?BindRecord@TDitta@@UAEXXZ
?BindRecord@TRegioni@@UAEXXZ
?CreateObject@HKLCodiciASL@@SGPAVCObject@@XZ
?CreateObject@HKLComuni@@SGPAVCObject@@XZ
?CreateObject@HKLDitte@@SGPAVCObject@@XZ
?CreateObject@HKLRegioni@@SGPAVCObject@@XZ
?CreateObject@TCodiciASL@@SGPAVCObject@@XZ
?CreateObject@TComuni@@SGPAVCObject@@XZ
?CreateObject@TComuniIndirizziAsl@@SGPAVCObject@@XZ
?CreateObject@TDitta@@SGPAVCObject@@XZ
?CreateObject@TRegioni@@SGPAVCObject@@XZ
?FindRecord@TRComuni@@QAE?AW4FindResult@TableReader@@ABVDataStr@@@Z
?FindRecord@TRComuniIndirizziAsl@@QAE?AW4FindResult@TableReader@@ABVDataStr@@@Z
?GetDataObj@HKLCodiciASL@@UBEPAVDataObj@@XZ
?GetDataObj@HKLComuni@@UBEPAVDataObj@@XZ
?GetDataObj@HKLDitte@@UBEPAVDataObj@@XZ
?GetDataObj@HKLRegioni@@UBEPAVDataObj@@XZ
?GetRecord@HKLCodiciASL@@QBEPAVTCodiciASL@@XZ
?GetRecord@HKLComuni@@QBEPAVTComuni@@XZ
?GetRecord@HKLDitte@@QBEPAVTDitta@@XZ
?GetRecord@HKLRegioni@@QBEPAVTRegioni@@XZ
?GetRecord@TRComuni@@QBEPAVTComuni@@XZ
?GetRecord@TRComuniIndirizziAsl@@QBEPAVTComuniIndirizziAsl@@XZ
?GetRuntimeClass@HKLCodiciASL@@UBEPAUCRuntimeClass@@XZ
?GetRuntimeClass@HKLComuni@@UBEPAUCRuntimeClass@@XZ
?GetRuntimeClass@HKLDitte@@UBEPAUCRuntimeClass@@XZ
?GetRuntimeClass@HKLRegioni@@UBEPAUCRuntimeClass@@XZ
?GetRuntimeClass@TCodiciASL@@UBEPAUCRuntimeClass@@XZ
?GetRuntimeClass@TComuni@@UBEPAUCRuntimeClass@@XZ
?GetRuntimeClass@TComuniIndirizziAsl@@UBEPAUCRuntimeClass@@XZ
?GetRuntimeClass@TDitta@@UBEPAUCRuntimeClass@@XZ
?GetRuntimeClass@TRComuni@@UBEPAUCRuntimeClass@@XZ
?GetRuntimeClass@TRComuniIndirizziAsl@@UBEPAUCRuntimeClass@@XZ
?GetRuntimeClass@TRegioni@@UBEPAUCRuntimeClass@@XZ
?GetStaticName@TCodiciASL@@SAPBGXZ
?GetStaticName@TComuni@@SAPBGXZ
?GetStaticName@TComuniIndirizziAsl@@SAPBGXZ
?GetStaticName@TDitta@@SAPBGXZ
?GetStaticName@TRegioni@@SAPBGXZ
?GetThisClass@HKLCodiciASL@@SGPAUCRuntimeClass@@XZ
?GetThisClass@HKLComuni@@SGPAUCRuntimeClass@@XZ
?GetThisClass@HKLDitte@@SGPAUCRuntimeClass@@XZ
?GetThisClass@HKLRegioni@@SGPAUCRuntimeClass@@XZ
?GetThisClass@TCodiciASL@@SGPAUCRuntimeClass@@XZ
?GetThisClass@TComuni@@SGPAUCRuntimeClass@@XZ
?GetThisClass@TComuniIndirizziAsl@@SGPAUCRuntimeClass@@XZ
?GetThisClass@TDitta@@SGPAUCRuntimeClass@@XZ
?GetThisClass@TRComuni@@SGPAUCRuntimeClass@@XZ
?GetThisClass@TRComuniIndirizziAsl@@SGPAUCRuntimeClass@@XZ
?GetThisClass@TRegioni@@SGPAUCRuntimeClass@@XZ
?IsEmptyQuery@TRComuni@@MAEHXZ
?IsEmptyQuery@TRComuniIndirizziAsl@@MAEHXZ
?OnDefineQuery@HKLCodiciASL@@UAEXW4SelectionType@HotKeyLinkObj@@@Z
?OnDefineQuery@HKLComuni@@UAEXW4SelectionType@HotKeyLinkObj@@@Z
?OnDefineQuery@HKLDitte@@UAEXW4SelectionType@HotKeyLinkObj@@@Z
?OnDefineQuery@HKLRegioni@@UAEXW4SelectionType@HotKeyLinkObj@@@Z
?OnDefineQuery@TRComuni@@MAEXXZ
?OnDefineQuery@TRComuniIndirizziAsl@@MAEXXZ
?OnPrepareQuery@HKLCodiciASL@@UAEXPAVDataObj@@W4SelectionType@HotKeyLinkObj@@@Z
?OnPrepareQuery@HKLComuni@@UAEXPAVDataObj@@W4SelectionType@HotKeyLinkObj@@@Z
?OnPrepareQuery@HKLDitte@@UAEXPAVDataObj@@W4SelectionType@HotKeyLinkObj@@@Z
?OnPrepareQuery@HKLRegioni@@UAEXPAVDataObj@@W4SelectionType@HotKeyLinkObj@@@Z
?OnPrepareQuery@TRComuni@@MAEXXZ
?OnPrepareQuery@TRComuniIndirizziAsl@@MAEXXZ
?_GetBaseClass@HKLCodiciASL@@KGPAUCRuntimeClass@@XZ
?_GetBaseClass@HKLComuni@@KGPAUCRuntimeClass@@XZ
?_GetBaseClass@HKLDitte@@KGPAUCRuntimeClass@@XZ
?_GetBaseClass@HKLRegioni@@KGPAUCRuntimeClass@@XZ
?_GetBaseClass@TCodiciASL@@KGPAUCRuntimeClass@@XZ
?_GetBaseClass@TComuni@@KGPAUCRuntimeClass@@XZ
?_GetBaseClass@TComuniIndirizziAsl@@KGPAUCRuntimeClass@@XZ
?_GetBaseClass@TDitta@@KGPAUCRuntimeClass@@XZ
?_GetBaseClass@TRComuni@@KGPAUCRuntimeClass@@XZ
?_GetBaseClass@TRComuniIndirizziAsl@@KGPAUCRuntimeClass@@XZ
?_GetBaseClass@TRegioni@@KGPAUCRuntimeClass@@XZ
?classHKLCodiciASL@HKLCodiciASL@@2UCRuntimeClass@@B
?classHKLComuni@HKLComuni@@2UCRuntimeClass@@B
?classHKLDitte@HKLDitte@@2UCRuntimeClass@@B
?classHKLRegioni@HKLRegioni@@2UCRuntimeClass@@B
?classTCodiciASL@TCodiciASL@@2UCRuntimeClass@@B
?classTComuni@TComuni@@2UCRuntimeClass@@B
?classTComuniIndirizziAsl@TComuniIndirizziAsl@@2UCRuntimeClass@@B
?classTDitta@TDitta@@2UCRuntimeClass@@B
?classTRComuni@TRComuni@@2UCRuntimeClass@@B
?classTRComuniIndirizziAsl@TRComuniIndirizziAsl@@2UCRuntimeClass@@B
?classTRegioni@TRegioni@@2UCRuntimeClass@@B
_TaskBuilderAddOn_@0

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

53747c9c65d40ecfb3591dfc07972aa3

Headers

DLL Characteristics

File Characteristics

Imports

tbgeneric

tboledb

tbges

tbgenlib

tbnamesolver

mfc100u

msvcr100

kernel32

Exports

Exports

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 26KB - Virtual size: 26KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 26KB - Virtual size: 26KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 4KB - Virtual size: 4KB