2e617329472a219d47d88beab938c6b5541e9509eae9f3096f94893472f7e688

Sharing

Copy URL Twitter E-mail

General

Target

2e617329472a219d47d88beab938c6b5541e9509eae9f3096f94893472f7e688
Size

108KB
MD5

6bb42b669f9e2376776edc8b3db1c8a5
SHA1

cc3c5d57dcefbeaca7e667540d436cc35db45167
SHA256

2e617329472a219d47d88beab938c6b5541e9509eae9f3096f94893472f7e688
SHA512

cd668415927293993212411c5b490a1b72ef36aeef8f035c90d6c753fb7dc1cfeea515a95b6b02a7d28d87d00699a92f677bead2be0bffc152ba057838476eac
SSDEEP

3072:E8Uvd9FmFZACBNzZHhJRIOuMQ23/s59676h0xJKhVm9:gvrFmJBnHhJRIjMYC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e617329472a219d47d88beab938c6b5541e9509eae9f3096f94893472f7e688

Files

2e617329472a219d47d88beab938c6b5541e9509eae9f3096f94893472f7e688
.dll windows:4 windows x86 arch:x86

912cb31a4ee0a7d5b6af13391244736d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

searedbase02lib

WGetStructDichiarazione
WGetQuadroAttivo
WGetQuadro
WGetStructProcedura
WSetModalita
WAggiornaFlag
WDisattivaQuadro
WIsCompilato

seasrvuni01w32

DisattivaDelegaUnica
SeaLog_Init
SeaLog
SeaLog_Show

seasrvred02w32

WsbGetImporto
arrotondFIS
WsbSettaAmbienteSrvRed02
WfnRedUtilizzatoCreditiF24
RedArrotEuro
WsbGetDatiDebitiCrediti
WfnGetNumDebCred
WfnVistoConfPresente
WfnEsisteCausale1_8_31
WfnRedEsclusioneCreditiF24

seasrvcon02w32

_WfnGetTipoModuloContabilita@4
SeaConvertiImportoLireEuro
_WIsNuovaGestione@16

seasrvrb601w32

SoggettoNonOperativoRSW32
WsbSettaAmbienteSrvRb6

seasrvunimathfnw32

inverti11
sub_buf11
piu_dec11
mul_buf11
meno_dec11
add_buf11
somma_dec11

seatools

lpPds

aisamwin32

isamrn
stint
ldint
isamcl
isamoo
isamrg
isamkey
isamrw
isamwa
isamdr
isamrl
stdata
isamrp
isamrk

sea32

AdeguaLoadrecord
bytecmp
errdisp
SeaGetEnv32
cfstore
Exists
getanno
getmmgg
SeaGlobalFree
cfload
FormatStr
contalettere
NCalcola
DecConst
cfcmp
TestCampo
SeaMessaggio
cfinit
movebyte
WSeaChangePathNameArch
SeaGlobalMalloc

user32

wsprintfA

seard6mul4bw32

WsbCalcolaQuadri_RS_Enc

msvcrt

fclose
fopen
free
_initterm
malloc
_itoa
_adjust_fdiv
atoi

Exports

Exports

No_InfoToolTip_AI_W32
WfnCancella
WfnCancella_AI
WfnCercaAzie
WfnDebCredIDbyPos
WfnDopoCase
WfnDopoCase_AI
WfnEndComp
WfnGetDescrByPos
WfnInitComp
WfnIsDebugUCC
WfnRegistra
WfnRegistra_AI
WfnSaltaCampi
WfnSaltaCampi_AI
WfnSeaLogRitenute
WfnSeaPad_AI
WfnSeaPad_RX1
WsbCommit
WsbDeleteRecCompTmp
WsbDopoSelezione
WsbDopoSelezione_AI
WsbSaveRecCompTmp
WsbSettaAmbienteRd6qrx0b
WsbTermina_AI
WsbVistaCodTributo

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

912cb31a4ee0a7d5b6af13391244736d

Headers

File Characteristics

Imports

searedbase02lib

seasrvuni01w32

seasrvred02w32

seasrvcon02w32

seasrvrb601w32

seasrvunimathfnw32

seatools

aisamwin32

sea32

user32

seard6mul4bw32

msvcrt

Exports

Exports

Sections

.text Size: 72KB - Virtual size: 71KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 16KB - Virtual size: 34KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 72KB - Virtual size: 71KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 16KB - Virtual size: 34KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 7KB