46060514aa15c36c2be76873e2c6656babd7f5d3b972a57515b06419f4c229c6

Sharing

Copy URL Twitter E-mail

General

Target

46060514aa15c36c2be76873e2c6656babd7f5d3b972a57515b06419f4c229c6
Size

120KB
MD5

cc3b704915cd350a04ae9d944fb9f4c4
SHA1

5914c9dfd1e4d2733d27ed6656c254bd74d7bb8f
SHA256

46060514aa15c36c2be76873e2c6656babd7f5d3b972a57515b06419f4c229c6
SHA512

a9954d8d48d4202d1a29bd5fec0fa05d9060d1f1a78e49656b19151cf58a299ec5a51c8d3d600c0f4792e70c987afcd34eb74fb6d1278362e1cb9f2ba39513e1
SSDEEP

3072:3Q4EWXHFSiEECl98GVXdwlIz/Hv1jCSbuN2fp:3QfWXHFSLECl98GVNGYHv1uSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46060514aa15c36c2be76873e2c6656babd7f5d3b972a57515b06419f4c229c6

Files

46060514aa15c36c2be76873e2c6656babd7f5d3b972a57515b06419f4c229c6
.dll windows:4 windows x86 arch:x86

a38c78e321d3d13acfe2eb2c2b6b1c8c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

seard3fabw32

fnDestroyFabsCache730W32
fnGetFabFromCache730W32
fnRegistraFab730W32
sbChiamateFab730W32
fnLoopOnFabsFromCache730W32
fnCreateFabsCache730W32
sbFreeFabRTOOLS730W32
sbSettaAmbienteFab730W32

seard3terw32

fnRegistraTer730W32
fnCreateTersCache730W32
sbFreeTerRTOOLS730W32
sbSettaAmbienteTer730W32
fnLoopOnTersFromCache730W32
sbChiamateTer730W32
fnDestroyTersCache730W32
fnGetTerFromCache730W32

user32

wsprintfA
SendMessageA

seatools

lpPds

aisamwin32

isamrg
isamrn
isamoo
isamcl
isamkey
isamrk
get_iserrno
ldint
stint
isamwa
isamrw
ais_release
isamrp
isamrl
isamrf

sea32

MessDisp
SeaGlobalMalloc
movebyte
cfcmp
errdisp
cfstore
SeaMessaggio
cfinit
TestCampo
AdeguaLoadrecord
bytecmp
DecConst
SeaGetEnv32
ldstring
meno_dec
piu_dec
NCalcola
SeaGlobalFree
revdataga
cfload

seasrvred02w32

_RED_DA_ComuniEXW32@0
WPrintat
RedArrotEuro
WsbLeggiComuneEX
WfnCloseWin
RED_DatiAnagrafici
WfnOpenWin

seasrvunimathfnw32

mul_intdec
sub_buf
add_buf

seasrvrd301w32

WsbAggiornaResidenzaAnagrafica
WRiempi_Struttura_Anag_Con
_WRiempi_Struttura_Anag_Tutore@4

searedbase02lib

WChiudiDichiarante
WGetStructDichiarazione
WGetStructProcedura
WCancellaStatoDichiarante
WStartEnumQuadri
WMemorizzaStatoQuadri
WApriDichiarante
WAggiornaFlag

seard3man03w32

WsbSettaAmbienteRd3Man03
WsbCalcoliQuadri_DMan
WfnCalcolaESalvaDMAN

seard3mul01w32

WQuadroF
WsbSettaAmbienteRd3Mul01
WQuadroD

seard3lavdipw32

WsbSettaAmbienteRd3LavDip
WsbCalcolaTotaliRC

seard3oneriw32

sbInizializzaFlagW32
WsbSettaAmbienteRd3Oneri

seard3fam02w32

sbCalcolaNumFigliEsteroW32_730

msvcrt

__mb_cur_max
fclose
_pctype
_unlink
fopen
_chdir
atoi
fgets
fflush
rewind
strchr
free
_initterm
malloc
_adjust_fdiv
_isctype

Exports

Exports

WfnEsegui
WsbGetNomeFileAG730

Sections

.text
Size: 96KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a38c78e321d3d13acfe2eb2c2b6b1c8c

Headers

File Characteristics

Imports

seard3fabw32

seard3terw32

user32

seatools

aisamwin32

sea32

seasrvred02w32

seasrvunimathfnw32

seasrvrd301w32

searedbase02lib

seard3man03w32

seard3mul01w32

seard3lavdipw32

seard3oneriw32

seard3fam02w32

msvcrt

Exports

Exports

Sections

.text Size: 96KB - Virtual size: 93KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 27KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 96KB - Virtual size: 93KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 27KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB