8a9112b3aa6c3a3e54dca0081a21412e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8a9112b3aa6c3a3e54dca0081a21412e_JaffaCakes118
Size

23.6MB
MD5

8a9112b3aa6c3a3e54dca0081a21412e
SHA1

68f59ea4a8c1ce74c9cb0bc1529ee4e19f9d377f
SHA256

ed5ab4b17c5df26539b2a2a92fd031019a8c52680fbca96436c13e3973a4b1a1
SHA512

7d56d9caaf3bd1f2cc09e8103e4687458eeb7f33f8052bd920387f57bddf9a71cb95c39b18bddbafce62db3c28a2a44395619b21c75802c96ef7906ad521bf6e
SSDEEP

393216:TLBJAY3fnLKYQVnQvRudApR3FWbSSos5UGkaTgshKB8CK0t0WrcvF7mllr6wR:fnT3fLKfVnQwdER3we7WHkyv28Cd0+cY

Score

4^/10

pdf link

Malware Config

Signatures

HTTP links in PDF interactive object 1 IoCs

Detects HTTP links in interactive objects within PDF files.

pdf link

resource	yara_rule
static1/unpack001/C:/Sisdata/PrgSti/PEF/IRAP_Istruzioni2016.pdf	pdf_with_link_action

One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
pdf link

Unsigned PE 5 IoCs

Checks for missing Authenticode signature.

resource
8a9112b3aa6c3a3e54dca0081a21412e_JaffaCakes118
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$SYSDIR/msvbvm50.dll
unpack001/C:/Sisdata/Common/CheckSisProcess.exe
unpack001/C:/Sisdata/Stipendi.exe

NSIS installer 1 IoCs

installer

resource	yara_rule
sample	nsis_installer_1

Files

8a9112b3aa6c3a3e54dca0081a21412e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7fa974366048f9c551ef45714595665e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc

user32

MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect

gdi32

SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject

shell32

SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/modern-wizard.bmp
$SYSDIR/msvbvm50.dll
.dll regsvr32 windows:4 windows x86 arch:x86

0615e9c25da62e90a31fe72638c8f4fb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MoveFileA
ReadFile
LockFile
RemoveDirectoryA
CreateDirectoryA
UnlockFile
HeapSize
GetStringTypeW
FlushFileBuffers
TerminateProcess
HeapFree
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetStdHandle
GetTimeZoneInformation
LockResource
ExitThread
RaiseException
GetTempFileNameA
lstrcpynA
GetLastError
_lclose
_llseek
FreeLibrary
GetLocaleInfoA
lstrcpyA
GetModuleHandleA
GetSystemDefaultLangID
FormatMessageA
TlsGetValue
HeapCreate
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
IsDBCSLeadByte
IsBadReadPtr
MulDiv
lstrcmpiA
GetTickCount
GetCurrentThreadId
lstrcmpA
lstrlenA
HeapAlloc
CreateThread
SetEnvironmentVariableA
LCMapStringW
GetStringTypeA
CompareStringW
FileTimeToLocalFileTime
SetLocalTime
SetFileAttributesA
SetFileTime
FileTimeToSystemTime
GetFileTime
GetUserDefaultLangID
GetModuleFileNameW
GetLocalTime
CreateProcessW
RtlUnwind
GetDateFormatA
UnhandledExceptionFilter
FormatMessageW
GetStartupInfoA
SetCurrentDirectoryA
ExitProcess
GetShortPathNameA
GetVolumeInformationA
GetStringTypeExA
GetDriveTypeA
FindClose
FindFirstFileA
FindNextFileA
VirtualAlloc
VirtualFree
GetSystemInfo
WinExec
VirtualProtect
FlushInstructionCache
SetFilePointer
WriteFile
SetEndOfFile
ResumeThread
GetCurrentProcess
DuplicateHandle
TlsFree
GetCommandLineA
TlsSetValue
lstrcmpiW
TlsAlloc
GetVersion
LoadLibraryExA
CreateProcessA
GetExitCodeProcess
MultiByteToWideChar
GetSystemTime
SystemTimeToFileTime
SetEvent
WaitForSingleObject
ResetEvent
GetCurrentProcessId
CloseHandle
CreateEventA
IsBadCodePtr
FreeResource
GetSystemDefaultLCID
LoadLibraryA
GetUserDefaultLCID
GetSystemDirectoryA
Sleep
GetProcAddress
GetVersionExA
SetErrorMode
GlobalDeleteAtom
HeapDestroy
LCMapStringA
GlobalAddAtomA
ReleaseSemaphore
GetProfileStringA
CreateSemaphoreA
VirtualQuery
CompareStringA
WideCharToMultiByte
HeapReAlloc
GetCurrentDirectoryA
lstrcatA
GetFileAttributesA
GetFullPathNameA
GetModuleFileNameA
SearchPathA
GetFileType
SetLastError
CreateFileA
GlobalFree
DeleteFileA
GlobalUnlock
SizeofResource
FindResourceA
LoadResource
GlobalHandle
GlobalAlloc
GlobalSize
_lwrite
GlobalReAlloc
GlobalLock
GetTempPathA
_lread
GetWindowsDirectoryA
SetHandleCount
GetStdHandle
GetCPInfo

user32

DdeConnect
DdePostAdvise
DdeClientTransaction
DdeAbandonTransaction
DdeGetData
DdeGetLastError
DdeCreateDataHandle
DdeCmpStringHandles
SetCursorPos
EnumClipboardFormats
DestroyCursor
GetAsyncKeyState
WaitForInputIdle
GetForegroundWindow
keybd_event
VkKeyScanW
SetWindowsHookExW
CharUpperBuffW
CharUpperBuffA
CharLowerBuffW
FindWindowW
FindWindowA
GetLastActivePopup
GetClassInfoExA
LoadIconA
RegisterClassExA
FrameRect
CreateDialogParamA
IsRectEmpty
IsDialogMessageA
ShowCursor
OemToCharA
CharToOemBuffA
LoadAcceleratorsA
BringWindowToTop
GetClipboardFormatNameA
DrawTextA
SetWindowTextA
SendDlgItemMessageA
SetDlgItemTextA
GetWindowTextA
EndDialog
LoadBitmapA
CallNextHookEx
DispatchMessageA
MsgWaitForMultipleObjects
WaitMessage
PostQuitMessage
GetKeyboardLayout
UnhookWindowsHookEx
RegisterClipboardFormatA
CreateCursor
CreateIcon
PostMessageW
PeekMessageW
GetPropA
RemovePropA
SetPropA
CharUpperA
ClipCursor
GetKeyState
DefFrameProcA
GetDlgItem
IsWindow
UnregisterClassA
RegisterClassA
DestroyWindow
AdjustWindowRect
GetTabbedTextExtentA
TabbedTextOutA
GetUpdateRect
FillRect
CharToOemA
LoadStringA
MessageBoxA
wsprintfA
WinHelpA
GetSysColor
GetWindowDC
GetSystemMetrics
SetActiveWindow
DdeSetUserHandle
DdeDisconnect
EqualRect
CopyRect
AdjustWindowRectEx
TranslateMDISysAccel
GetMenuItemCount
GetMenuStringA
GetMenuState
AppendMenuA
IsCharAlphaA
GetCaretPos
CharPrevA
CharNextA
ReleaseDC
GetDC
IntersectRect
GetUpdateRgn
BeginPaint
EndPaint
PtInRect
WindowFromPoint
ReleaseCapture
SetCapture
InflateRect
GetWindowRect
ScreenToClient
MoveWindow
IsWindowEnabled
GetActiveWindow
IsChild
SetParent
ClientToScreen
DrawFocusRect
GetMessageTime
GetMessagePos
CopyAcceleratorTableA
GetWindowRgn
GetMenuItemInfoA
SetMenuItemInfoA
GetKeyboardState
TranslateMessage
SetKeyboardState
GetQueueStatus
RemoveMenu
EnableMenuItem
MapWindowPoints
GetCursorPos
CallWindowProcA
GetDoubleClickTime
CreateMenu
GetClientRect
CreateWindowExA
SetWindowContextHelpId
InvalidateRect
DefWindowProcA
GetDesktopWindow
GetWindowThreadProcessId
SetForegroundWindow
MessageBeep
DefMDIChildProcA
IsZoomed
DestroyMenu
PeekMessageA
PostMessageA
IsIconic
UpdateWindow
SetWindowLongA
DrawMenuBar
GetWindowLongA
IsWindowVisible
EnableWindow
SetFocus
SendMessageA
ShowWindow
GetCapture
GetClassNameA
SetWindowsHookExA
LoadCursorA
SetCursor
GetWindow
GetParent
GetFocus
OffsetRect
SetWindowPos
GetSystemMenu
DdeUninitialize
DdeCreateStringHandleA
DdeNameService
DdeQueryConvInfo
DdeInitializeA
DdeFreeStringHandle
SetScrollRange
DdeQueryStringA
DdeFreeDataHandle
LockWindowUpdate
SetScrollPos
DrawFrameControl
SetClipboardData
CharLowerBuffA
IsClipboardFormatAvailable
EmptyClipboard
GetClipboardData
OpenClipboard
SetCaretPos
CloseClipboard
GetCaretBlinkTime
DestroyCaret
GetWindowTextLengthA
HideCaret
GetScrollPos
CreateCaret
ShowCaret
ToAscii
SetRect
SetWindowRgn
ShowScrollBar
CreateAcceleratorTableA
DestroyAcceleratorTable
SubtractRect
EnumThreadWindows
SetScrollInfo
AttachThreadInput
InvalidateRgn
GetDCEx
DeleteMenu
TrackPopupMenu
SetMenuDefaultItem
GetSubMenu
CreatePopupMenu
InsertMenuA
SetMenu
GetMenuItemID
GetMenu
SetTimer
CheckMenuItem
ModifyMenuA
GetIconInfo
KillTimer
GetCursor
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
CharLowerA
PostThreadMessageA
VkKeyScanA
DrawIcon
MessageBoxIndirectA
SystemParametersInfoA
DestroyIcon
DialogBoxParamA
GetClassInfoA
LoadImageA
GetScrollInfo

gdi32

CreateSolidBrush
CreatePen
SetBkColor
CreateHatchBrush
CreatePatternBrush
CreateBitmap
SetTextColor
OffsetRgn
CreateRectRgn
OffsetWindowOrgEx
PatBlt
SetBrushOrgEx
SelectObject
IntersectClipRect
SaveDC
RestoreDC
CombineRgn
SetRectRgn
Rectangle
SelectPalette
GetClipBox
RealizePalette
SetWindowOrgEx
ExcludeClipRect
SetROP2
GetTextMetricsA
EnumFontsA
CreateHalftonePalette
SetBkMode
GetROP2
TranslateCharsetInfo
BitBlt
CreateCompatibleDC
DeleteDC
GetObjectA
GetDeviceCaps
CreateCompatibleBitmap
CreateBrushIndirect
GetStockObject
CreatePenIndirect
MoveToEx
Arc
LineTo
Ellipse
SetStretchBltMode
Pie
ExtTextOutA
GetTextExtentPoint32A
GetPixel
CreateRectRgnIndirect
GetBitmapBits
SetPixelV
GetCurrentObject
GetTextExtentPointA
StretchDIBits
GetBkColor
StretchBlt
TextOutA
CreatePalette
EndDoc
CreateDIBitmap
StartPage
EndPage
AbortDoc
CreateDCA
ResetDCA
StartDocA
ScaleViewportExtEx
SetViewportExtEx
Escape
SetWindowExtEx
SetMapMode
SetViewportOrgEx
CloseMetaFile
CreateMetaFileA
DeleteMetaFile
SelectClipRgn
SetAbortProc
PlayMetaFile
PtInRegion
DeleteEnhMetaFile
CreateFontIndirectA
GetEnhMetaFileHeader
ScaleWindowExtEx
PlayEnhMetaFile
GetPaletteEntries
CloseEnhMetaFile
GetWindowOrgEx
CreateICA
ExtCreateRegion
CreateEnhMetaFileA
GetWindowExtEx
GetViewportExtEx
GetDIBits
CopyMetaFileA
PathToRegion
CopyEnhMetaFileA
BeginPath
WidenPath
EndPath
GetMapMode
SetDIBColorTable
GetTextColor
RoundRect
CreateRoundRectRgn
CreateDIBSection
GetObjectType
GetSystemPaletteEntries
CreateEllipticRgnIndirect
DeleteObject
UnrealizeObject
GetNearestColor

advapi32

ReportEventA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueA
RegSetValueA
RegSetValueExA
RegCreateKeyA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegisterEventSourceA
DeregisterEventSource
RegQueryInfoKeyA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegSetValueExW
RegOpenKeyW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyW
RegEnumValueW
RegEnumValueA
RegQueryValueExW
RegCreateKeyW

ole32

OleLoad
BindMoniker
RegisterDragDrop
RevokeDragDrop
CoLockObjectExternal
DoDragDrop
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
CreateDataAdviseHolder
CreateOleAdviseHolder
OleLoadFromStream
CoMarshalInterface
CoUnmarshalInterface
CreateStreamOnHGlobal
StringFromCLSID
StringFromGUID2
CLSIDFromProgID
ProgIDFromCLSID
CoGetClassObject
CoCreateInstance
CoRegisterClassObject
CoRevokeClassObject
CLSIDFromString
MkParseDisplayName
OleLockRunning
CreateILockBytesOnHGlobal
OleFlushClipboard
ReleaseStgMedium
OleQueryLinkFromData
OleQueryCreateFromData
OleIsCurrentClipboard
OleSetMenuDescriptor
OleSave
StgOpenStorage
OleDoAutoConvert
OleDuplicateData
OleRegGetUserType
CoIsOle1Class
OleSaveToStream
ReadClassStm
ReadClassStg
OleConvertIStorageToOLESTREAM
OleConvertOLESTREAMToIStorage
StgCreateDocfile
StgIsStorageILockBytes
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
OleCreateFromData
OleCreateLinkFromData
OleGetIconOfClass
OleGetClipboard
OleSetClipboard
OleIsRunning
CreateBindCtx
OleCreateLink
OleCreateLinkToFile
GetClassFile
OleGetAutoConvert
OleRun
OleCreateFromFile
WriteClassStg
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoGetMalloc
IIDFromString
CoDisconnectObject
IsAccelerator

oleaut32

VariantClear
OleTranslateColor
SysFreeString
OleCreateFontIndirect
VariantInit
SysStringLen
SysAllocStringByteLen
OleCreatePictureIndirect
SysAllocStringLen
VariantChangeType
OaBuildVersion
CreateErrorInfo
GetErrorInfo
SetErrorInfo
SysStringByteLen
CreateDispTypeInfo
DispGetParam
DispGetIDsOfNames
DispInvoke
OleCreatePropertyFrame
LoadTypeLibEx
UnRegisterTypeLi
RegisterTypeLi
LoadTypeLi
SafeArrayUnaccessData
SysAllocString
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayAccessData
VariantCopy
SafeArrayDestroy
SafeArrayCreate
VariantCopyInd
SafeArrayGetUBound
OleLoadPicture
SafeArrayGetElement
SafeArrayPutElement
SafeArrayGetLBound
SafeArrayCopy
OleIconToCursor
SafeArrayRedim
SafeArrayDestroyDescriptor
SafeArrayAllocData
RevokeActiveObject
SafeArrayDestroyData
SafeArrayLock
SafeArrayAllocDescriptor
VariantChangeTypeEx
GetActiveObject
SafeArrayUnlock
VarR8FromStr
SysReAllocStringLen
VarDateFromStr
VarBstrFromI2
VarCyFromI4
VarBstrFromR4
VarBstrFromR8
VarBstrFromI4
VarBstrFromCy
VarI2FromStr
VarBstrFromDate
VarI4FromR8
VarR4FromStr
VarI4FromStr
SysReAllocString
VarCyFromStr
LoadRegTypeLi
LHashValOfNameSysA

Exports

Exports

BASIC_CLASS_AddRef
BASIC_CLASS_GetIDsOfNames
BASIC_CLASS_Invoke
BASIC_CLASS_QueryInterface
BASIC_CLASS_Release
BASIC_DISPINTERFACE_GetTICount
BASIC_DISPINTERFACE_GetTypeInfo
CopyRecord
CreateIExprSrvObj
DLLGetDocumentation
DllFunctionCall
DllRegisterServer
DllUnregisterServer
EVENT_SINK2_AddRef
EVENT_SINK2_Release
EVENT_SINK_AddRef
EVENT_SINK_GetIDsOfNames
EVENT_SINK_Invoke
EVENT_SINK_QueryInterface
EVENT_SINK_Release
EbCreateContext
EbDestroyContext
EbGetHandleOfExecutingProject
EbGetObjConnectionCounts
EbGetVBAObject
EbIsProjectOnStack
EbLibraryLoad
EbLibraryUnload
EbLoadRunTime
EbResetProject
EbResetProjectNormal
EbSetContextWorkerThread
GetMem1
GetMem2
GetMem4
GetMem8
GetMemEvent
GetMemNewObj
GetMemObj
GetMemStr
GetMemVar
IID_IVbaHost
MethCallEngine
ProcCallEngine
PutMem1
PutMem2
PutMem4
PutMem8
PutMemEvent
PutMemNewObj
PutMemObj
PutMemStr
PutMemVar
SetMemEvent
SetMemNewObj
SetMemObj
SetMemVar
ThunRTMain
TipCreateInstanceEx
TipCreateInstanceProject
TipGetAddressOfPredeclaredInstance
TipInvokeMethod
TipInvokeMethod2
TipSetOption
TipUnloadInstance
TipUnloadProject
UserDllMain
VBDllCanUnloadNow
VBDllGetClassObject
VBDllRegisterServer
VBDllUnRegisterServer
VarPtr
Zombie_AddRef
Zombie_GetIDsOfNames
Zombie_GetTypeInfo
Zombie_GetTypeInfoCount
Zombie_Invoke
Zombie_QueryInterface
Zombie_Release
_CIatan
_CIcos
_CIexp
_CIlog
_CIsin
_CIsqrt
_CItan
__vbaAptOffset
__vbaAryConstruct
__vbaAryCopy
__vbaAryDestruct
__vbaAryLock
__vbaAryMove
__vbaAryRebase1Var
__vbaAryUnlock
__vbaAryVarVarg
__vbaBoolErrVar
__vbaBoolStr
__vbaBoolVar
__vbaBoolVarNull
__vbaCastObj
__vbaCastObjVar
__vbaCheckType
__vbaCheckTypeVar
__vbaChkstk
__vbaCopyBytes
__vbaCyAbs
__vbaCyAdd
__vbaCyErrVar
__vbaCyFix
__vbaCyForInit
__vbaCyForNext
__vbaCyI2
__vbaCyI4
__vbaCyInt
__vbaCyMul
__vbaCyMulI2
__vbaCySgn
__vbaCyStr
__vbaCySub
__vbaCyUI1
__vbaCyVar
__vbaDateR4
__vbaDateR8
__vbaDateStr
__vbaDateVar
__vbaDerefAry
__vbaDerefAry1
__vbaEnd
__vbaErase
__vbaEraseKeepData
__vbaEraseNoPop
__vbaError
__vbaErrorOverflow
__vbaExceptHandler
__vbaExitEachAry
__vbaExitEachColl
__vbaExitEachVar
__vbaExitProc
__vbaFPException
__vbaFPFix
__vbaFPInt
__vbaFailedFriend
__vbaFileClose
__vbaFileCloseAll
__vbaFileLock
__vbaFileOpen
__vbaFileSeek
__vbaFixstrConstruct
__vbaForEachAry
__vbaForEachCollAd
__vbaForEachCollObj
__vbaForEachCollVar
__vbaForEachVar
__vbaFpCDblR4
__vbaFpCDblR8
__vbaFpCSngR4
__vbaFpCSngR8
__vbaFpCmpCy
__vbaFpCy
__vbaFpI2
__vbaFpI4
__vbaFpR4
__vbaFpR8
__vbaFpUI1
__vbaFreeObj
__vbaFreeObjList
__vbaFreeStr
__vbaFreeStrList
__vbaFreeVar
__vbaFreeVarList
__vbaFreeVarg
__vbaGenerateBoundsError
__vbaGet3
__vbaGet4
__vbaGetFxStr3
__vbaGetFxStr4
__vbaGetOwner3
__vbaGetOwner4
__vbaGosub
__vbaGosubFree
__vbaGosubReturn
__vbaHresultCheck
__vbaHresultCheckNonvirt
__vbaHresultCheckObj
__vbaI2Abs
__vbaI2Cy
__vbaI2ErrVar
__vbaI2ForNextCheck
__vbaI2I4
__vbaI2Sgn
__vbaI2Str
__vbaI2Var
__vbaI4Abs
__vbaI4Cy
__vbaI4ErrVar
__vbaI4ForNextCheck
__vbaI4Sgn
__vbaI4Str
__vbaI4Var
__vbaInStr
__vbaInStrB
__vbaInStrVar
__vbaInStrVarB
__vbaInputFile
__vbaLateIdCall
__vbaLateIdCallLd
__vbaLateIdCallSt
__vbaLateIdNamedCall
__vbaLateIdNamedCallLd
__vbaLateIdNamedCallSt
__vbaLateIdNamedStAd
__vbaLateIdSt
__vbaLateIdStAd
__vbaLateMemCall
__vbaLateMemCallLd
__vbaLateMemCallSt
__vbaLateMemNamedCall
__vbaLateMemNamedCallLd
__vbaLateMemNamedCallSt
__vbaLateMemNamedStAd
__vbaLateMemSt
__vbaLateMemStAd
__vbaLbound
__vbaLenBstr
__vbaLenBstrB
__vbaLenVar
__vbaLenVarB
__vbaLineInputStr
__vbaLineInputVar
__vbaLsetFixstr
__vbaLsetFixstrFree
__vbaMidStmtBstr
__vbaMidStmtBstrB
__vbaMidStmtVar
__vbaMidStmtVarB
__vbaNameFile
__vbaNew
__vbaNew2
__vbaNextEachAry
__vbaNextEachCollAd
__vbaNextEachCollObj
__vbaNextEachCollVar
__vbaNextEachVar
__vbaObjAddref
__vbaObjIs
__vbaObjSet
__vbaObjSetAddref
__vbaObjVar
__vbaOnError
__vbaOnGoCheck
__vbaPowerR8
__vbaPrintFile
__vbaPrintObj
__vbaPut3
__vbaPut4
__vbaPutFxStr3
__vbaPutFxStr4
__vbaPutOwner3
__vbaPutOwner4
__vbaR4Cy
__vbaR4ErrVar
__vbaR4ForNextCheck
__vbaR4Sgn
__vbaR4Str
__vbaR4Var
__vbaR8Cy
__vbaR8ErrVar
__vbaR8FixI2
__vbaR8FixI4
__vbaR8ForNextCheck
__vbaR8IntI2
__vbaR8IntI4
__vbaR8Sgn
__vbaR8Str
__vbaR8Var
__vbaRaiseEvent
__vbaRecAnsiToUni
__vbaRecAssign
__vbaRecDestruct
__vbaRecDestructAnsi
__vbaRecUniToAnsi
__vbaRedim
__vbaRedimPreserve
__vbaRedimPreserveVar
__vbaRedimVar
__vbaRefVarAry
__vbaResume
__vbaRsetFixstr
__vbaRsetFixstrFree
__vbaSetSystemError
__vbaStopExe
__vbaStr2Vec
__vbaStrAryToAnsi
__vbaStrAryToUnicode
__vbaStrBool
__vbaStrCat
__vbaStrCmp
__vbaStrComp
__vbaStrCompVar
__vbaStrCopy
__vbaStrCy
__vbaStrDate
__vbaStrErrVarCopy
__vbaStrFixstr
__vbaStrI2
__vbaStrI4
__vbaStrLike
__vbaStrMove
__vbaStrR4
__vbaStrR8
__vbaStrTextCmp
__vbaStrTextLike
__vbaStrToAnsi
__vbaStrToUnicode
__vbaStrUI1
__vbaStrVarCopy
__vbaStrVarMove
__vbaStrVarVal
__vbaUI1Cy
__vbaUI1ErrVar
__vbaUI1I2
__vbaUI1I4
__vbaUI1Sgn
__vbaUI1Str
__vbaUI1Var
__vbaUbound
__vbaUnkVar
__vbaVar2Vec
__vbaVarAbs
__vbaVarAdd
__vbaVarAnd
__vbaVarCat
__vbaVarCmpEq
__vbaVarCmpGe
__vbaVarCmpGt
__vbaVarCmpLe
__vbaVarCmpLt
__vbaVarCmpNe
__vbaVarCopy
__vbaVarDateVar
__vbaVarDiv
__vbaVarDup
__vbaVarEqv
__vbaVarErrI4
__vbaVarFix
__vbaVarForInit
__vbaVarForNext
__vbaVarIdiv
__vbaVarImp
__vbaVarIndexLoad
__vbaVarIndexLoadRef
__vbaVarIndexLoadRefLock
__vbaVarIndexStore
__vbaVarIndexStoreObj
__vbaVarInt
__vbaVarLike
__vbaVarLikeVar
__vbaVarMod
__vbaVarMove
__vbaVarMul
__vbaVarNeg
__vbaVarNot
__vbaVarOr
__vbaVarPow
__vbaVarSetObj
__vbaVarSetObjAddref
__vbaVarSetUnk
__vbaVarSetUnkAddref
__vbaVarSetVar
__vbaVarSetVarAddref
__vbaVarSub
__vbaVarTextCmpEq
__vbaVarTextCmpGe
__vbaVarTextCmpGt
__vbaVarTextCmpLe
__vbaVarTextCmpLt
__vbaVarTextCmpNe
__vbaVarTextLike
__vbaVarTextLikeVar
__vbaVarTextTstEq
__vbaVarTextTstGe
__vbaVarTextTstGt
__vbaVarTextTstLe
__vbaVarTextTstLt
__vbaVarTextTstNe
__vbaVarTstEq
__vbaVarTstGe
__vbaVarTstGt
__vbaVarTstLe
__vbaVarTstLt
__vbaVarTstNe
__vbaVarVargNofree
__vbaVarXor
__vbaVargObj
__vbaVargObjAddref
__vbaVargParmRef
__vbaVargUnk
__vbaVargUnkAddref
__vbaVargVar
__vbaVargVarCopy
__vbaVargVarMove
__vbaVargVarRef
__vbaVerifyVarObj
__vbaWriteFile
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
_allmul
rtBoolFromErrVar
rtBstrFromErrVar
rtCyFromErrVar
rtDecFromVar
rtI2FromErrVar
rtI4FromErrVar
rtR4FromErrVar
rtR8FromErrVar
rtUI1FromErrVar
rtcAbsVar
rtcAnsiValueBstr
rtcAppActivate
rtcAppleScript
rtcArray
rtcAtn
rtcBeep
rtcBstrFromAnsi
rtcBstrFromByte
rtcBstrFromChar
rtcBstrFromError
rtcBstrFromFormatVar
rtcByteValueBstr
rtcCVErrFromVar
rtcChangeDir
rtcChangeDrive
rtcCharValueBstr
rtcChoose
rtcCommandBstr
rtcCommandVar
rtcCompareBstr
rtcCos
rtcCreateObject
rtcCurrentDir
rtcCurrentDirBstr
rtcDDB
rtcDateAdd
rtcDateDiff
rtcDateFromVar
rtcDatePart
rtcDeleteSetting
rtcDir
rtcDoEvents
rtcEndOfFile
rtcEnvironBstr
rtcEnvironVar
rtcErrObj
rtcExp
rtcFV
rtcFileAttributes
rtcFileCopy
rtcFileDateTime
rtcFileLen
rtcFileLength
rtcFileLocation
rtcFileReset
rtcFileSeek
rtcFileWidth
rtcFixVar
rtcFreeFile
rtcGetAllSettings
rtcGetCurrentCalendar
rtcGetDateBstr
rtcGetDateValue
rtcGetDateVar
rtcGetDayOfMonth
rtcGetDayOfWeek
rtcGetErl
rtcGetFileAttr
rtcGetHostLCID
rtcGetHourOfDay
rtcGetMinuteOfHour
rtcGetMonthOfYear
rtcGetObject
rtcGetPresentDate
rtcGetSecondOfMinute
rtcGetSetting
rtcGetTimeBstr
rtcGetTimeValue
rtcGetTimeVar
rtcGetTimer
rtcGetYear
rtcHexBstrFromVar

Sections

.text
Size: 1008KB - Virtual size: 1007KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ENGINE
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
C:/Sisdata/Common/CheckSisProcess.exe
.exe windows:4 windows x86 arch:x86

6326b743632fb8cb2db9a45c423a154b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm50

__vbaVarSub
_CIcos
_adj_fptan
__vbaFreeVar
__vbaFreeVarList
_adj_fdiv_m64
ord517
_adj_fprem1
__vbaRecAnsiToUni
__vbaStrCat
__vbaLsetFixstr
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaExitProc
__vbaOnError
ord595
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
__vbaStrFixstr
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaGenerateBoundsError
ord528
__vbaStrCmp
__vbaVarTstEq
DllFunctionCall
__vbaAryConstruct
_adj_fpatan
__vbaRecUniToAnsi
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
ord608
__vbaFPException
__vbaInStrVar
__vbaI2Var
ord645
_CIlog
__vbaErrorOverflow
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord100
__vbaVarDup
ord616
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 598B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
C:/Sisdata/PrgSti/ArkVuoto.mdb
C:/Sisdata/PrgSti/PEF/1.blk
C:/Sisdata/PrgSti/PEF/AccessorieFuoriSistema.png
.png
C:/Sisdata/PrgSti/PEF/Aprova.pef
C:/Sisdata/PrgSti/PEF/Arretrati.pef
C:/Sisdata/PrgSti/PEF/Arretrati2009.pef
C:/Sisdata/PrgSti/PEF/ArretratiIIS.pef
C:/Sisdata/PrgSti/PEF/ArretratiUnaTantum.pef
C:/Sisdata/PrgSti/PEF/BONUS.pdf
.pdf
- http://www.agenziaentrate.it
- http://www.agenziaentrate.it/
C:/Sisdata/PrgSti/PEF/CCU_2017_mod_Pagina_10.png
.png
C:/Sisdata/PrgSti/PEF/CCU_2017_mod_Pagina_11.png
.png
C:/Sisdata/PrgSti/PEF/CCU_2017_mod_Pagina_12.png
.png
C:/Sisdata/PrgSti/PEF/CCU_2017_mod_Pagina_3.png
.png
C:/Sisdata/PrgSti/PEF/CCU_2017_mod_Pagina_4.png
.png
C:/Sisdata/PrgSti/PEF/CCU_2017_mod_Pagina_5.png
.png
C:/Sisdata/PrgSti/PEF/CCU_2017_mod_Pagina_6.png
.png
C:/Sisdata/PrgSti/PEF/CCU_2017_mod_Pagina_7.png
.png
C:/Sisdata/PrgSti/PEF/CCU_2017_mod_Pagina_8.png
.png
C:/Sisdata/PrgSti/PEF/CCU_2017_mod_Pagina_9.png
.png
C:/Sisdata/PrgSti/PEF/CUD_2018_Pagina_10.png
.png
C:/Sisdata/PrgSti/PEF/CUD_2018_Pagina_3.png
.png
C:/Sisdata/PrgSti/PEF/CUD_2018_Pagina_4.png
.png
C:/Sisdata/PrgSti/PEF/CUD_2018_Pagina_5.png
.png
C:/Sisdata/PrgSti/PEF/CUD_2018_Pagina_6.png
.png
C:/Sisdata/PrgSti/PEF/CUD_2018_Pagina_7.png
.png
C:/Sisdata/PrgSti/PEF/CUD_2018_Pagina_8.png
.png
C:/Sisdata/PrgSti/PEF/CUD_2018_Pagina_8b.png
.png
C:/Sisdata/PrgSti/PEF/CUD_2018_Pagina_9.png
.png
C:/Sisdata/PrgSti/PEF/CUD_2018_Pagina_A1.png
.png
C:/Sisdata/PrgSti/PEF/CUD_2018_Pagina_A2.png
.png
C:/Sisdata/PrgSti/PEF/CUD_2019_Pagina_10.png
.png
C:/Sisdata/PrgSti/PEF/CUD_2019_Pagina_3.png
.png
C:/Sisdata/PrgSti/PEF/CUD_2019_Pagina_4.png
.png
C:/Sisdata/PrgSti/PEF/CUD_2019_Pagina_5.png
.png
C:/Sisdata/PrgSti/PEF/CUD_2019_Pagina_6.png
.png
C:/Sisdata/PrgSti/PEF/CUD_2019_Pagina_7.png
.png
C:/Sisdata/PrgSti/PEF/CUD_2019_Pagina_8.png
.png
C:/Sisdata/PrgSti/PEF/CUD_2019_Pagina_9.png
.png
C:/Sisdata/PrgSti/PEF/CUD_2019_Pagina_A1.png
.png
C:/Sisdata/PrgSti/PEF/CUD_2019_Pagina_A2.png
.png
C:/Sisdata/PrgSti/PEF/CUD_2019_Pagina_locazioni.png
.png
C:/Sisdata/PrgSti/PEF/CU_2017_mod_Pagina_1.png
.png
C:/Sisdata/PrgSti/PEF/CU_2017_mod_Pagina_10.png
.png
C:/Sisdata/PrgSti/PEF/CU_2017_mod_Pagina_2.png
.png
C:/Sisdata/PrgSti/PEF/CU_2017_mod_Pagina_3.png
.png
C:/Sisdata/PrgSti/PEF/CU_2017_mod_Pagina_4.png
.png
C:/Sisdata/PrgSti/PEF/CU_2017_mod_Pagina_5.png
.png
C:/Sisdata/PrgSti/PEF/CU_2017_mod_Pagina_6.png
.png
C:/Sisdata/PrgSti/PEF/CU_2017_mod_Pagina_7.png
.png
C:/Sisdata/PrgSti/PEF/CU_2017_mod_Pagina_8.png
.png
C:/Sisdata/PrgSti/PEF/CU_2017_mod_Pagina_9.png
.png
C:/Sisdata/PrgSti/PEF/CU_CedolinoEsami.pef
C:/Sisdata/PrgSti/PEF/CU_CedolinoStipendi.pef
C:/Sisdata/PrgSti/PEF/CU_CedolinoSviluppo.pef
C:/Sisdata/PrgSti/PEF/CU_Fabbisogno2.pef
C:/Sisdata/PrgSti/PEF/CU_Fabbisogno3.pef
C:/Sisdata/PrgSti/PEF/CU_TabellaRiepilogativa.pef
C:/Sisdata/PrgSti/PEF/CalcoloCompensiEsami.pdf
.pdf
C:/Sisdata/PrgSti/PEF/Cedolino.bmd
C:/Sisdata/PrgSti/PEF/Cedolino.pef
C:/Sisdata/PrgSti/PEF/Cedolino2003.pef
C:/Sisdata/PrgSti/PEF/Circolare2446.pdf
.pdf
C:/Sisdata/PrgSti/PEF/ComuFisc.pef
C:/Sisdata/PrgSti/PEF/ConguaglioOP.pef
C:/Sisdata/PrgSti/PEF/ConguaglioOPbis.pef
C:/Sisdata/PrgSti/PEF/DMA.pdf
.pdf
C:/Sisdata/PrgSti/PEF/DMA1.bmd
C:/Sisdata/PrgSti/PEF/DMA1x.bmd
C:/Sisdata/PrgSti/PEF/DMA2.pdf
.pdf
C:/Sisdata/PrgSti/PEF/DMA2B.bmd
C:/Sisdata/PrgSti/PEF/DMA7B.bmd
C:/Sisdata/PrgSti/PEF/DMA9.bmd
C:/Sisdata/PrgSti/PEF/DMA_E1.bmd
C:/Sisdata/PrgSti/PEF/DMA_Z2.bmd
C:/Sisdata/PrgSti/PEF/DMA_Z3.bmd
C:/Sisdata/PrgSti/PEF/DPS.txt
C:/Sisdata/PrgSti/PEF/DPT1.pef
C:/Sisdata/PrgSti/PEF/DPT2.pef
C:/Sisdata/PrgSti/PEF/DPT_AllegatoTecnico2008.pdf
.pdf
C:/Sisdata/PrgSti/PEF/DPT_AllegatoTecnico2010.pdf
.pdf
C:/Sisdata/PrgSti/PEF/DPT_Circolare2008.pdf
.pdf
C:/Sisdata/PrgSti/PEF/DPT_Circolare2010.pdf
.pdf
C:/Sisdata/PrgSti/PEF/DPT_ManualeUtente2007.pdf
.pdf
C:/Sisdata/PrgSti/PEF/DPT_ManualeUtente2010.pdf
.pdf
C:/Sisdata/PrgSti/PEF/Distinta1.pef
C:/Sisdata/PrgSti/PEF/Distinta2.pef
C:/Sisdata/PrgSti/PEF/DistintaBis.pef
C:/Sisdata/PrgSti/PEF/Elenco1.pef
C:/Sisdata/PrgSti/PEF/Elenco2.pef
C:/Sisdata/PrgSti/PEF/Elenco3.pef
C:/Sisdata/PrgSti/PEF/Elenco4.pef
C:/Sisdata/PrgSti/PEF/ElencoINPDAP.pef
C:/Sisdata/PrgSti/PEF/ElencoPercipienti.pef
C:/Sisdata/PrgSti/PEF/F24EP.png
.png
C:/Sisdata/PrgSti/PEF/FAQ.mdb
C:/Sisdata/PrgSti/PEF/FAQ.txt
C:/Sisdata/PrgSti/PEF/FabbEsami.pef
C:/Sisdata/PrgSti/PEF/FabbEsamiPres.pef
C:/Sisdata/PrgSti/PEF/Fabbisogno2.pef
C:/Sisdata/PrgSti/PEF/Fabbisogno3.pef
C:/Sisdata/PrgSti/PEF/FabbisognoAllegatoB.pef
C:/Sisdata/PrgSti/PEF/Ferie.pef
C:/Sisdata/PrgSti/PEF/GenHelp.pef
C:/Sisdata/PrgSti/PEF/IRAP_2018_Pagina_01.png
.png
C:/Sisdata/PrgSti/PEF/IRAP_2018_Pagina_02.png
.png
C:/Sisdata/PrgSti/PEF/IRAP_2018_Pagina_11.png
.png
C:/Sisdata/PrgSti/PEF/IRAP_2018_Pagina_12.png
.png
C:/Sisdata/PrgSti/PEF/IRAP_2018_Pagina_13.png
.png
C:/Sisdata/PrgSti/PEF/IRAP_2018_Pagina_14.png
.png
C:/Sisdata/PrgSti/PEF/IRAP_2018_Pagina_15.png
.png
C:/Sisdata/PrgSti/PEF/IRAP_2018_Pagina_16.png
.png
C:/Sisdata/PrgSti/PEF/IRAP_2019_Pagina_01.png
.png
C:/Sisdata/PrgSti/PEF/IRAP_2019_Pagina_02.png
.png
C:/Sisdata/PrgSti/PEF/IRAP_2019_Pagina_11.png
.png
C:/Sisdata/PrgSti/PEF/IRAP_2019_Pagina_12.png
.png
C:/Sisdata/PrgSti/PEF/IRAP_2019_Pagina_13.png
.png
C:/Sisdata/PrgSti/PEF/IRAP_2019_Pagina_14.png
.png
C:/Sisdata/PrgSti/PEF/IRAP_2019_Pagina_15.png
.png
C:/Sisdata/PrgSti/PEF/IRAP_2019_Pagina_16.png
.png
C:/Sisdata/PrgSti/PEF/IRAP_2019_Pagina_17.png
.png
C:/Sisdata/PrgSti/PEF/IRAP_Istruzioni2016.pdf
.pdf
C:/Sisdata/PrgSti/PEF/IRAP_Istruzioni2017.pdf
.pdf
C:/Sisdata/PrgSti/PEF/IRAP_Istruzioni2018.pdf
.pdf
C:/Sisdata/PrgSti/PEF/IRAP_Istruzioni2019.pdf
.pdf
C:/Sisdata/PrgSti/PEF/IRAP_Modello2016.pdf
.pdf
C:/Sisdata/PrgSti/PEF/IRAP_Modello2017.pdf
.pdf
C:/Sisdata/PrgSti/PEF/IRAP_Modello2018.pdf
.pdf
C:/Sisdata/PrgSti/PEF/IRAP_Modello2019.pdf
.pdf
C:/Sisdata/PrgSti/PEF/IRAP_ModuloXML2012.pdf
.pdf
C:/Sisdata/PrgSti/PEF/IRAP_Nota.pdf
.pdf
C:/Sisdata/PrgSti/PEF/InpsDM10.pef
C:/Sisdata/PrgSti/PEF/InvioEMENS.pdf
.pdf
C:/Sisdata/PrgSti/PEF/IrapIQ2000.pef
C:/Sisdata/PrgSti/PEF/IrapIQ2001.pef
C:/Sisdata/PrgSti/PEF/IrapIQ2007.pef
C:/Sisdata/PrgSti/PEF/IrapIQ99.pef
C:/Sisdata/PrgSti/PEF/Irap_2017_Pagina_01.png
.png
C:/Sisdata/PrgSti/PEF/Irap_2017_Pagina_02.png
.png
C:/Sisdata/PrgSti/PEF/Irap_2017_Pagina_11.png
.png
C:/Sisdata/PrgSti/PEF/Irap_2017_Pagina_12.png
.png
C:/Sisdata/PrgSti/PEF/Irap_2017_Pagina_13.png
.png
C:/Sisdata/PrgSti/PEF/Irap_2017_Pagina_14.png
.png
C:/Sisdata/PrgSti/PEF/Irap_2017_Pagina_15.png
.png
C:/Sisdata/PrgSti/PEF/Irap_2017_Pagina_16.png
.png
C:/Sisdata/PrgSti/PEF/IstruzioniCUD2019.pdf
.pdf
C:/Sisdata/PrgSti/PEF/M2000.pef
C:/Sisdata/PrgSti/PEF/ModGcopertina.pef
C:/Sisdata/PrgSti/PEF/ModGdoc.pef
C:/Sisdata/PrgSti/PEF/ModGndoc.pef
C:/Sisdata/PrgSti/PEF/ModelloM.pef
C:/Sisdata/PrgSti/PEF/NotaBonus.pdf
.pdf
C:/Sisdata/PrgSti/PEF/NotaCOCOCO.pdf
.pdf
C:/Sisdata/PrgSti/PEF/NotaDMA.pdf
.pdf
C:/Sisdata/PrgSti/PEF/NotaEsami.pdf
.pdf
C:/Sisdata/PrgSti/PEF/NotaEsami2015.pdf
.pdf
C:/Sisdata/PrgSti/PEF/NotaRitenutaINAIL.pdf
.pdf
C:/Sisdata/PrgSti/PEF/Ordinativo.pef
C:/Sisdata/PrgSti/PEF/OreEccedenti.pef
C:/Sisdata/PrgSti/PEF/Pens1.bmd
C:/Sisdata/PrgSti/PEF/Pens2.bmd
C:/Sisdata/PrgSti/PEF/PrimoPiano.txt
C:/Sisdata/PrgSti/PEF/ProspettoImpegniSpesaST.html
.html
C:/Sisdata/PrgSti/PEF/Protocollo.txt
C:/Sisdata/PrgSti/PEF/QuadernoTabelleCCNL.html
.html
C:/Sisdata/PrgSti/PEF/QuadernoTabelleCCNL_TABE.html
.html
C:/Sisdata/PrgSti/PEF/Quadra1.pef
C:/Sisdata/PrgSti/PEF/Quadra2.pef
C:/Sisdata/PrgSti/PEF/QuadroAddIRPEF.pef
C:/Sisdata/PrgSti/PEF/QuadroINPS.pef
C:/Sisdata/PrgSti/PEF/QuadroIRPEF.pef
C:/Sisdata/PrgSti/PEF/QuadroRitenute.pef
C:/Sisdata/PrgSti/PEF/QuadroRitenute770.pef
C:/Sisdata/PrgSti/PEF/QuadroSSN.pef
C:/Sisdata/PrgSti/PEF/QuadroSSN2000.pef
C:/Sisdata/PrgSti/PEF/QuadroST.pef
C:/Sisdata/PrgSti/PEF/QuadroSTbis.pef
C:/Sisdata/PrgSti/PEF/RegStip.pef
C:/Sisdata/PrgSti/PEF/RiepInpsAnnuale.pef
C:/Sisdata/PrgSti/PEF/RiepilogoINPS.pef
C:/Sisdata/PrgSti/PEF/RiepilogoINPS1.pef
C:/Sisdata/PrgSti/PEF/RitFisc.pef
C:/Sisdata/PrgSti/PEF/RitInps13.pef
C:/Sisdata/PrgSti/PEF/RitPrev.pef
C:/Sisdata/PrgSti/PEF/SisdataRete.txt
C:/Sisdata/PrgSti/PEF/SkeFisc.pef
C:/Sisdata/PrgSti/PEF/SkeFisc2005.pef
C:/Sisdata/PrgSti/PEF/SkeFiscIRSAE.pef
C:/Sisdata/PrgSti/PEF/SkeINPS.pef
C:/Sisdata/PrgSti/PEF/SkedaOP.pef
C:/Sisdata/PrgSti/PEF/SkedaPens.pef
C:/Sisdata/PrgSti/PEF/TabAnaPre.pef
C:/Sisdata/PrgSti/PEF/TabConcorsi.pef
C:/Sisdata/PrgSti/PEF/TabEsami.pef
C:/Sisdata/PrgSti/PEF/Tabella1.pef
C:/Sisdata/PrgSti/PEF/Tabella2.pef
C:/Sisdata/PrgSti/PEF/Tabella3.pef
C:/Sisdata/PrgSti/PEF/ValBank.pdf
.pdf
C:/Sisdata/PrgSti/Stipendi.prj
C:/Sisdata/Stipendi.exe
.exe windows:4 windows x86 arch:x86

b3a4b0380bbaf129966abd3d043c6034

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm50

EVENT_SINK_GetIDsOfNames
__vbaVarTstGt
__vbaVarSub
__vbaStrI2
_CIcos
_adj_fptan
__vbaStrI4
__vbaStrAryToUnicode
__vbaVarMove
__vbaVarVargNofree
__vbaStrAryToAnsi
__vbaFreeVar
ord588
__vbaGosubReturn
__vbaStrVarMove
__vbaLineInputStr
__vbaLenBstr
__vbaLateIdCall
__vbaPut3
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
EVENT_SINK_Invoke
__vbaVarIndexStore
__vbaFreeObjList
__vbaGetFxStr4
ord516
__vbaStrErrVarCopy
__vbaVarFix
_adj_fprem1
__vbaRecAnsiToUni
ord518
ord519
__vbaResume
__vbaCopyBytes
__vbaVarCmpNe
__vbaStrCat
__vbaError
ord552
__vbaLsetFixstr
ord553
ord660
__vbaStrDate
ord661
__vbaSetSystemError
__vbaRecDestruct
__vbaNameFile
ord662
__vbaHresultCheckObj
ord663
ord557
__vbaVargVarCopy
ord558
__vbaLenVar
_adj_fdiv_m32
__vbaVarTstLe
Zombie_GetTypeInfo
__vbaVarCmpGe
__vbaAryDestruct
__vbaVarIndexLoadRefLock
ord591
__vbaLateMemSt
ord592
__vbaVarPow
ord593
__vbaVarForInit
__vbaExitProc
__vbaForEachCollObj
ord300
ord594
ord301
ord595
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
ord303
__vbaObjSetAddref
_adj_fdivr_m16i
ord304
__vbaVarIndexLoad
ord598
ord305
__vbaFpR4
ord306
__vbaStrFixstr
ord520
__vbaForEachCollVar
__vbaBoolVar
ord307
ord521
__vbaFPFix
ord309
__vbaRefVarAry
ord523
__vbaVargVar
__vbaVarTstLt
__vbaFpR8
__vbaBoolVarNull
_CIsin
__vbaErase
ord631
ord632
__vbaVarCmpGt
__vbaVargVarMove
ord525
__vbaNextEachCollObj
__vbaChkstk
__vbaGosubFree
__vbaFileClose
EVENT_SINK_AddRef
ord527
__vbaVarAbs
ord528
__vbaGenerateBoundsError
__vbaExitEachColl
ord529
__vbaStrCmp
__vbaPutOwner3
__vbaVarTstEq
__vbaPutOwner4
ord560
__vbaPrintObj
ord561
__vbaNextEachCollVar
__vbaObjVar
__vbaI2I4
DllFunctionCall
ord563
__vbaVarOr
__vbaFpUI1
__vbaCastObjVar
__vbaLbound
__vbaAryConstruct
__vbaRedimPreserve
_adj_fpatan
__vbaR4Var
__vbaFixstrConstruct
__vbaLateIdCallLd
Zombie_GetTypeInfoCount
__vbaStrR8
__vbaRedim
__vbaRecUniToAnsi
EVENT_SINK_Release
__vbaNew
ord600
__vbaUI1I2
_CIsqrt
ord310
__vbaObjIs
__vbaLateIdCallSt
__vbaVarAnd
ord311
EVENT_SINK_QueryInterface
__vbaUI1I4
__vbaStrUI1
__vbaVarMul
__vbaExceptHandler
ord312
ord313
__vbaInputFile
__vbaPrintFile
__vbaStrToUnicode
__vbaDateStr
ord606
_adj_fprem
_adj_fdivr_m64
__vbaR8ErrVar
__vbaLateIdStAd
__vbaI2Str
ord607
__vbaVarDiv
__vbaGosub
ord608
ord530
ord531
__vbaVarCmpLe
__vbaFPException
ord532
__vbaInStrVar
ord319
__vbaStrVarVal
__vbaUbound
ord534
__vbaGetOwner4
ord535
__vbaDateVar
__vbaCheckType
__vbaLsetFixstrFree
__vbaI2Var
ord536
ord537
__vbaStopExe
ord538
ord645
_CIlog
__vbaErrorOverflow
ord647
__vbaFileOpen
ord648
__vbaR8Str
__vbaVar2Vec
__vbaInStr
__vbaNew2
__vbaVarInt
ord571
_adj_fdiv_m32i
ord572
_adj_fdivr_m32i
__vbaVarSetObj
__vbaStrCopy
__vbaI4Str
__vbaVarCmpLt
__vbaVarNot
__vbaFreeStrList
ord576
_adj_fdivr_m32
ord577
__vbaPowerR8
__vbaR8Var
_adj_fdiv_r
ord578
ord685
ord100
ord579
__vbaVarTstNe
ord687
__vbaI4Var
__vbaVarCmpEq
ord610
__vbaLateMemCall
__vbaVarAdd
__vbaAryLock
ord320
ord612
__vbaStrToAnsi
__vbaVarDup
ord321
__vbaVerifyVarObj
ord613
__vbaFpI2
__vbaVarMod
__vbaCheckTypeVar
__vbaVarTstGe
__vbaFpI4
__vbaVarCopy
ord616
__vbaVarSetObjAddref
ord617
__vbaR8IntI2
__vbaLateMemCallLd
_CIatan
__vbaI2ErrVar
ord618
__vbaStrMove
__vbaCastObj
ord619
__vbaR8IntI4
__vbaStrVarCopy
__vbaVarNeg
ord542
ord650
ord543
_allmul
ord544
__vbaLateIdSt
ord652
ord545
__vbaLateMemCallSt
_CItan
ord546
ord547
__vbaUI1Var
__vbaFPInt
__vbaAryUnlock
__vbaVarForNext
_CIexp
__vbaMidStmtBstr
ord580
__vbaFreeStr
__vbaRecAssign
__vbaFreeObj
ord581

Sections

.text
Size: 9.8MB - Virtual size: 9.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 690KB - Virtual size: 689KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7fa974366048f9c551ef45714595665e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 151KB

.ndata Size: - Virtual size: 36KB

.rsrc Size: 16KB - Virtual size: 15KB

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comdlg32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 152B

.reloc Size: 1024B - Virtual size: 1012B

0615e9c25da62e90a31fe72638c8f4fb

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 1008KB - Virtual size: 1007KB

ENGINE Size: 68KB - Virtual size: 67KB

.data Size: 16KB - Virtual size: 22KB

.rsrc Size: 164KB - Virtual size: 160KB

.reloc Size: 64KB - Virtual size: 63KB

6326b743632fb8cb2db9a45c423a154b

Headers

File Characteristics

Imports

msvbvm50

Sections

.text Size: 6KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 2KB

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 1024B - Virtual size: 598B

b3a4b0380bbaf129966abd3d043c6034

Headers

File Characteristics

Imports

msvbvm50

Sections

.text Size: 9.8MB - Virtual size: 9.8MB

.data Size: 512B - Virtual size: 132KB

.idata Size: 5KB - Virtual size: 5KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 151KB

.ndata
Size: - Virtual size: 36KB

.rsrc
Size: 16KB - Virtual size: 15KB

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1024B - Virtual size: 1012B

.text
Size: 1008KB - Virtual size: 1007KB

ENGINE
Size: 68KB - Virtual size: 67KB

.data
Size: 16KB - Virtual size: 22KB

.rsrc
Size: 164KB - Virtual size: 160KB

.reloc
Size: 64KB - Virtual size: 63KB

.text
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 2KB

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1024B - Virtual size: 598B

.text
Size: 9.8MB - Virtual size: 9.8MB

.data
Size: 512B - Virtual size: 132KB

.idata
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 690KB - Virtual size: 689KB