emotet_exe_e4_6dba1a8483a192bcd7580a84384fcb2d78dc6f1c404255ef9169659c5db4a9e2_2022-01-20__212806[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e4_6dba1a8483a192bcd7580a84384fcb2d78dc6f1c404255ef9169659c5db4a9e2_2022-01-20__212806.exe
Size 624KB
Sample220120-1bwssabgg7
SHA256 6dba1a8483a192bcd7580a84384fcb2d78dc6f1c404255ef9169659c5db4a9e2
MD5 43971cea7e4c4e56a0188b86ae86626c
SHA1 fe8ef3bc86ea25e4a8e47c8d3c402d97d012e0bd
SHA512 a28291cd88813a9fbffff0bd4b5f67d0f3f052356bcb725c14f3971c34e8d2cfc3827cdefc73647852c2d18c6489ddbc2dfec127f0b01cfed3dd079e997a80ca
SSDEEP 12288:Td0saabmsb61ZuV3ZGuyfEgXkvPLEbsWrxD8iP29pi9N1G1DjsgqXXvhhcwEPwq:68mi61ZuRZGuyfEgXkvPLEbsODYDzVn
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_6dba1a8483a192bcd7580a84384fcb2d78dc6f1c404255ef9169659c5db4a9e2_2022-01-20__212806.exe

.dll 624KB

emotet_exe_e4_6dba1a8483a192bcd7580a84384fcb2d78dc6f1c404255ef9169659c5db4a9e2_2022-01-20__212806.exe

IMPHASH 42bfc936e90bcc6f5b01541917ef37a4
SHA256 6dba1a8483a192bcd7580a84384fcb2d78dc6f1c404255ef9169659c5db4a9e2
MD5 43971cea7e4c4e56a0188b86ae86626c
SHA1 fe8ef3bc86ea25e4a8e47c8d3c402d97d012e0bd
SHA512 a28291cd88813a9fbffff0bd4b5f67d0f3f052356bcb725c14f3971c34e8d2cfc3827cdefc73647852c2d18c6489ddbc2dfec127f0b01cfed3dd079e997a80ca
SSDEEP 12288:Td0saabmsb61ZuV3ZGuyfEgXkvPLEbsWrxD8iP29pi9N1G1DjsgqXXvhhcwEPwq:68mi61ZuRZGuyfEgXkvPLEbsODYDzVn
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

95798

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineA ExitProcess RtlUnwind TerminateProcess HeapReAlloc HeapSize HeapDestroy HeapCreate IsBadWritePtr SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemInfo QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeZoneInformation GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage SetStdHandle IsBadCodePtr GetLocaleInfoW SetEnvironmentVariableA SystemTimeToFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime FileTimeToSystemTime GetShortPathNameA CreateFileA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetCurrentDirectoryA GetOEMCP GetCPInfo InterlockedIncrement TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc GlobalFlags DeleteCriticalSection InitializeCriticalSection RaiseException InterlockedDecrement MulDiv FormatMessageA LocalFree GetDiskFreeSpaceA GetFullPathNameA GetTempFileNameA GetFileTime SetFileTime GetFileAttributesA CloseHandle GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA GetTickCount GetCurrentThread GlobalAlloc lstrcmpA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA GetModuleFileNameA SizeofResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcatA lstrcmpW lstrcpynA GetModuleHandleA GlobalLock GlobalUnlock GlobalFree FindResourceA LoadResource LockResource FreeResource GetVersion GetVersionExA CompareStringA GetThreadLocale lstrcmpiA GetLastError InterlockedExchange GetStringTypeExA MultiByteToWideChar GetACP CompareStringW WideCharToMultiByte GetLocaleInfoA lstrlenA HeapFree GetProcessHeap HeapAlloc GetModuleHandleW FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr VirtualProtect SetLastError VirtualAlloc VirtualFree UnhandledExceptionFilter VirtualQuery

user32

MessageBeep DestroyIcon ReleaseCapture LoadAcceleratorsA InsertMenuItemA CreatePopupMenu SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorA ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetMenuItemBitmaps ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA SendDlgItemMessageA GetFocus IsChild GetForegroundWindow GetLastActivePopup DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos LoadIconA PeekMessageA MapWindowPoints ScrollWindow MessageBoxA TrackPopupMenu GetKeyState GetMenuItemInfoA GetScrollRange SetForegroundWindow ShowScrollBar IsWindowVisible GetClientRect GetMenu PostMessageA GetNextDlgGroupItem GetMenuItemID GetMenuItemCount GetSysColor AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetScrollInfo SetScrollInfo GetClassInfoA RegisterClassA UnregisterClassA GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect CopyRect PtInRect wsprintfA GetWindowTextLengthA GetWindowTextA GetSysColorBrush EndPaint BeginPaint GetWindowDC GrayStringA DrawTextExA DrawTextA TabbedTextOutA InflateRect LoadCursorA SetCapture KillTimer SetTimer ClientToScreen SetWindowRgn GetScrollPos SetScrollPos GetWindow SetFocus GetDesktopWindow GetActiveWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow IsWindow GetWindowLongA GetDlgItem IsWindowEnabled GetParent InvalidateRgn CopyAcceleratorTableA CharNextA PostThreadMessageA LockWindowUpdate GetDCEx GetNextDlgTabItem EndDialog CharUpperA LoadBitmapA InvalidateRect GetDC SendMessageA UpdateWindow EnableWindow WindowFromPoint SetRect GetSubMenu DrawIcon FillRect FindWindowA GetMenuStringA InsertMenuA ShowOwnedPopups GetMessageA TranslateMessage GetCursorPos ValidateRect SetWindowContextHelpId MapDialogRect RegisterClipboardFormatA PostQuitMessage SetParent GetSystemMenu AppendMenuA DeleteMenu IsRectEmpty ReleaseDC IsZoomed LoadMenuA DestroyMenu UnpackDDElParam SetScrollRange SetCursor ReuseDDElParam

gdi32

CombineRgn GetMapMode PatBlt CreatePatternBrush SaveDC RestoreDC SetBkMode SetMapMode ExcludeClipRect IntersectClipRect LineTo MoveToEx SelectClipRgn GetViewportExtEx GetWindowExtEx BitBlt GetPixel PtVisible RectVisible TextOutA SetRectRgn SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn GetStockObject CreateSolidBrush GetBkColor GetTextColor GetRgnBox CreateRectRgnIndirect CreateRectRgn CreateFontIndirectA ExtTextOutA Ellipse LPtoDP CreateEllipticRgn GetDeviceCaps CreateFontA GetCharWidthA DeleteObject StretchDIBits DeleteDC GetTextExtentPoint32A GetTextMetricsA CreateCompatibleBitmap CreateBitmap GetObjectA SetBkColor SetTextColor GetClipBox Escape CreateCompatibleDC SelectObject

msimg32

TransparentBlt

comdlg32

GetSaveFileNameA GetFileTitleA GetOpenFileNameA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegSetValueA RegQueryValueExA RegOpenKeyExA RegCreateKeyExA RegSetValueExA RegDeleteValueA RegDeleteKeyA RegEnumKeyA RegOpenKeyA RegQueryValueA SetFileSecurityA RegCreateKeyA RegCloseKey GetFileSecurityA

shell32

DragFinish DragQueryFileA ExtractIconA SHGetFileInfoA DragAcceptFiles

comctl32

ord17 ImageList_Draw ImageList_GetImageInfo ImageList_Destroy

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CoTaskMemAlloc CoGetClassObject CoTaskMemFree CLSIDFromString CLSIDFromProgID OleInitialize CoFreeUnusedLibraries OleUninitialize CoRevokeClassObject OleIsCurrentClipboard OleFlushClipboard CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoRegisterMessageFilter

oleaut32

SysAllocStringLen SysFreeString SysStringLen SysAllocStringByteLen OleCreateFontIndirect SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy VariantInit VariantClear VariantChangeType