2d97cd0ed4cbfb42fb87b621beba765ea217da5ca393ab265ea65e00a055c40d

Sharing

Copy URL

Twitter E-mail

General

Target

2d97cd0ed4cbfb42fb87b621beba765ea217da5ca393ab265ea65e00a055c40d
Size

244KB
MD5

a8cfa215be5dec4b3e24cb057228e91b
SHA1

c1763064b4ef35141df2b8ab0d2ad5fed35bc5e9
SHA256

2d97cd0ed4cbfb42fb87b621beba765ea217da5ca393ab265ea65e00a055c40d
SHA512

4fe054a902896719663f8ece11c1778de6e1cfdf22892b782f439026f083cb460bb65360af7f705e61378269f5a8391d1f86bb5c65eb1a5dda7830596b50a51c
SSDEEP

3072:BSc6s7kxu0FlAMpBOQ0736/h7ribAPq2BWqIQr8zi1KcvWnbShMSaP:BBgxuY/v0OdrPdWqIMD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d97cd0ed4cbfb42fb87b621beba765ea217da5ca393ab265ea65e00a055c40d

Files

2d97cd0ed4cbfb42fb87b621beba765ea217da5ca393ab265ea65e00a055c40d
.dll windows:4 windows x86 arch:x86

71ca925a65403ae05acc17f1084c2c6a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

seasrvtelemw32

num_Q
_WFaiCampo@36
num_P
num_C
nAnnoArchivi
num_B
WsbEliminaSpaziFinali
fnApriSelectDiagnosi
nEsistonoStudi
fnLetturaPRE
lpzDirUtenteAnno
lProgressivoDich
pbUnica
LeggiAnagrafica
fnLetturaPRExDic
num_R
_WScriviRecordSM@4
_WInizializzaRecordSM@8
NumModulo
Wfncerca_lastStTel
sbInizBuffer
ScriviISAM_Tmp
_Wmovebyte2@12
record
_WInizializzaRecord@4
_WMuoviCAP@8
_WMuoviData@12
WfnLeggiPivaProduttoreSoftware
_WConvertiInMaiuscolo@12
LeggiCodiceComune
_WFormattaComuni@8
LeggiCodiceFiscaleUNICA
Studi
FunzioneInvioStudi
fnCalcolaDimensioneDirectory
fnLeggiTabella
nNumDichSelez
lProgressivo
isSilente
fnControllaDir
nfdTmp
fnCrea_ApriSelect

kernel32

FreeLibrary

user32

wsprintfA

seatools

lpPds

aisamwin32

ais_close
isamrw
ais_open
isamrn
ldint
isamrg
isamrk
stint
isamkey
isamoo
isamcl
get_iserrno
isamdr
isamwa
ais_build
ais_addindex
isamrf

sea32

bytecmp
MessDisp
SeaMessaggio
TestCampo
DispErr
SeaGlobalFree
cfstore
cfcmp
DecConst
cfload
oggi
movebyte
errdisp
strconv
cfinit
SeaGetEnv32
getanno
SeaGlobalMalloc

seasrvunimathfnw32

add_buf

seasrvred02w32

WPrintat
WsbLeggiComuneEX
WRedPrintLog_Init
WRedPrintLog_AddMessaggio
WfnLoadRecordLite
RedArrotEuro
WfnOpenWin
WRedPrintLog_AddDichiarante
WfnCloseWin
WRedPrintLog_Show
RED_DatiAnagrafici
WRedPrintLog_AddQuadro

searedbase02lib

WGetStructDichiarazione
WGetStructProcedura
WApriDichiarante
WChiudiDichiarante
WDichiaranteAperto
WIsDefinitivo
WIsCompilato

seasrvrd401w32

WsbSettaAmbienteSrvRd4
Riempi_Struttura_Anag_FC740_Prospetto
Riempi_Struttura_Anag_FC740_Contr
WsbBarraCasellePresentazione
WsbInitFD_740
Riempi_Struttura_Anag_FC740_Attestazioni

seard4man03w32

FnEseguiCalcoli_W32Man03
WFnLeggiSFU_RN

seard4mul03w32

fnVerificaRotturaChiaveConBufferPadreW32
WFnLeggiFiller_X_ACE
sbSettaAmbienteRd4Mul03W32
sbInizializzaChiaveProspettoMulW32

seard4mul02w32

sbCalcola_FillerZFU_W32

seard4fabw32

_fnUpdateFabInCacheW32@20
fnCreateFabsCacheUPFW32
fnLoopOnFabsFromCacheUPFW32
fnCacheMulDataOpUPFW32
fnGetFabFromCacheUPFW32
sbFreeFabRTOOLSUPFW32
sbSettaAmbienteFabUPFW32
fnDestroyFabsCacheUPFW32

seard4terw32

sbFreeTerRTOOLSUPFW32
sbSettaAmbienteTerUPFW32
fnDestroyTersCacheUPFW32
fnAdjCache4PrintUPFW32
fnCreateTersCacheUPFW32
fnGetTerFromCacheUPFW32
fnLoopOnTersFromCacheUPFW32

seard4oneriw32

WValorizzaRP_DaAltriQuadri

msvcrt

_unlink
fclose
fopen
fflush
fwrite
_iob
strtok
_initterm
malloc
_adjust_fdiv
free
atoi

Exports

Exports

TerminateBrowse
WfnInizio
WfnSelezione
WfnUlterioriFiltri
WsbGestioneF10
WsbGestioneReturn
WsbPopolaSelect

Sections

.text
Size: 168KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

71ca925a65403ae05acc17f1084c2c6a

Headers

File Characteristics

Imports

seasrvtelemw32

kernel32

user32

seatools

aisamwin32

sea32

seasrvunimathfnw32

seasrvred02w32

searedbase02lib

seasrvrd401w32

seard4man03w32

seard4mul03w32

seard4mul02w32

seard4fabw32

seard4terw32

seard4oneriw32

msvcrt

Exports

Exports

Sections

.text Size: 168KB - Virtual size: 166KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 44KB - Virtual size: 96KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 16KB - Virtual size: 13KB

.text
Size: 168KB - Virtual size: 166KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 44KB - Virtual size: 96KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 16KB - Virtual size: 13KB