7d388957071c6a8243005651101146d8fe0e63dd9eec2a11f93c0962ff8fe990

Sharing

Copy URL Twitter E-mail

General

Target

7d388957071c6a8243005651101146d8fe0e63dd9eec2a11f93c0962ff8fe990
Size

120KB
MD5

e7e617d2ae2cc02358b1e0b42c51a673
SHA1

20de5cab46029ee26c339d3ec6bf803e8188cee9
SHA256

7d388957071c6a8243005651101146d8fe0e63dd9eec2a11f93c0962ff8fe990
SHA512

47d5eff8cbe6bcd0cf9d36f6feb87cfd73afa9c062036c818896d11c3b321d7a9dc81e531f5edd8438443e9218c1b4a3831fb2aee0f6dd6f4cedfb97d651a237
SSDEEP

3072:pv/nF5FgKz2KsEjTtVVAkLRNhIAKjIdeP+I1N:p3R//6kLRqb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7d388957071c6a8243005651101146d8fe0e63dd9eec2a11f93c0962ff8fe990

Files

7d388957071c6a8243005651101146d8fe0e63dd9eec2a11f93c0962ff8fe990
.dll windows:4 windows x86 arch:x86

e6f501730d3506407f2ec8eb41730ed3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

seasrvunimathfnw32

add_buf
div_intdec
sub_buf

seatools

lpSeaWinEnviroment
lpPds

aisamwin32

isamcl
deccvint
decmul
isamrf
ais_build
ais_close
stlong
stdecimal
lddecimal
isamrn
isamrg
isamrk
isamoo
ldint
stint
isamkey
isamwa

seautility

IsLaserPrinter

sea32

errdisp
WSeaEform
oggi
bytecmp
contalettere
getmmgg
getanno
WSeaPrintTextFile
SeaGetEnv32
cfload
EformBreak
WSeaEformPrinterFile
FieldCat
inverti
perc_dec
mul_buf
OpenPrinterLaser
MessDisp
ststring
NCalcola
DecConst
TestCampo
movebyte
cfinit
piu_dec
cfcmp
cod_fis
cfstore

seasrvred02w32

WfnOpenWin
WPrintat
WfnCloseWin
WfnRedLeggiStatusF24
WfnDeterminaDataScadenza
RedArrotEuro
WfnLoadRecordLite
WfnGetAnnoStudio
WsbGetImporto
WsbGetDatiDebitiCrediti
WfnGetNumDebCred
WfnIsSimulazione

searedbase02lib

WIsCompilato
WApriDichiarante
WGetQuadro
WChiudiDichiarante
WGetStructProcedura
WGetStructDichiarazione
WSetModalita

user32

GetSystemMetrics
SendMessageA
wsprintfA

winspool.drv

ClosePrinter

seard4qrx02w32

fnLeggiCreditiRUW32
WsbSettaAmbienteRd4qrx02
WfnIsCipag

seaunisrvstamplib

_eform
PrintArea_StrAltDaRis
PrintArea
GetHeight_Area
InitStampa
SaltoPagina

msvcrt

_adjust_fdiv
_strcmpi
_unlink
malloc
_initterm
free
_ftol
exit
strncpy
fprintf
fclose
fopen
_iob
strncmp
strstr
ceil

Exports

Exports

GetbufferStampa
LeggiStudioW32
WImpostaEformParam
WSetTipoIndirizzo
WSettaStampaDaSQ
WfnCanoneLocazione
WfnQuadroAttivoStampaProspQuadriImpresa
WfnReportSituazioneUVR
WfnStampaProspQuadriImpresa
WsbProgress_Init
WsbSettaAmbiente
fnCkStuW32
fnDatiRiepilogoImposteW32
fnStampaQuadriCompilatiW32
fnStampaTabellaIVSW32
fnStampaW32
sbDettaglioCompensazioneW32
sbStampaSNW32
sbStampaSoloRateizzazioniW32
sbTipoRecordW32

Sections

.text
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e6f501730d3506407f2ec8eb41730ed3

Headers

File Characteristics

Imports

seasrvunimathfnw32

seatools

aisamwin32

seautility

sea32

seasrvred02w32

searedbase02lib

user32

winspool.drv

seard4qrx02w32

seaunisrvstamplib

msvcrt

Exports

Exports

Sections

.text Size: 80KB - Virtual size: 78KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 16KB - Virtual size: 71KB

.rsrc Size: 4KB - Virtual size: 1008B

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 80KB - Virtual size: 78KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 16KB - Virtual size: 71KB

.rsrc
Size: 4KB - Virtual size: 1008B

.reloc
Size: 12KB - Virtual size: 8KB