emotet_exe_e4_51596f5eef3075f3c83656f6e331a92d99881e201fb8ffd04496dbb72b092d05_2022-01-21__000944[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e4_51596f5eef3075f3c83656f6e331a92d99881e201fb8ffd04496dbb72b092d05_2022-01-21__000944.exe
Size 624KB
Sample220121-af667scdfq
SHA256 51596f5eef3075f3c83656f6e331a92d99881e201fb8ffd04496dbb72b092d05
MD5 84ae4f1030003b91bc1261ef94df6549
SHA1 29ef2b47fe4855f172882a292c0e786b9955ea3f
SHA512 7d412db2c84ad2379138206566632acecb834e6c37156ae2deb1d5ed6dfe9a63d15cb530b32952a2406e011fad9e88366af140d17f27348be69642b7c822324b
SSDEEP 12288:Td0saabmsb61ZuV3ZGuyfEgXkvPLEbsWrxD8iP29pi9NhG1DjsgqXXvhhcwEPwq:68mi61ZuRZGuyfEgXkvPLEbsODYDLVn
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_51596f5eef3075f3c83656f6e331a92d99881e201fb8ffd04496dbb72b092d05_2022-01-21__000944.exe

.dll 624KB

emotet_exe_e4_51596f5eef3075f3c83656f6e331a92d99881e201fb8ffd04496dbb72b092d05_2022-01-21__000944.exe

IMPHASH 42bfc936e90bcc6f5b01541917ef37a4
SHA256 51596f5eef3075f3c83656f6e331a92d99881e201fb8ffd04496dbb72b092d05
MD5 84ae4f1030003b91bc1261ef94df6549
SHA1 29ef2b47fe4855f172882a292c0e786b9955ea3f
SHA512 7d412db2c84ad2379138206566632acecb834e6c37156ae2deb1d5ed6dfe9a63d15cb530b32952a2406e011fad9e88366af140d17f27348be69642b7c822324b
SSDEEP 12288:Td0saabmsb61ZuV3ZGuyfEgXkvPLEbsWrxD8iP29pi9NhG1DjsgqXXvhhcwEPwq:68mi61ZuRZGuyfEgXkvPLEbsODYDLVn
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

95798

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineA ExitProcess RtlUnwind TerminateProcess HeapReAlloc HeapSize HeapDestroy HeapCreate IsBadWritePtr SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemInfo QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeZoneInformation GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage SetStdHandle IsBadCodePtr GetLocaleInfoW SetEnvironmentVariableA SystemTimeToFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime FileTimeToSystemTime GetShortPathNameA CreateFileA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetCurrentDirectoryA GetOEMCP GetCPInfo InterlockedIncrement TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc GlobalFlags DeleteCriticalSection InitializeCriticalSection RaiseException InterlockedDecrement MulDiv FormatMessageA LocalFree GetDiskFreeSpaceA GetFullPathNameA GetTempFileNameA GetFileTime SetFileTime GetFileAttributesA CloseHandle GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA GetTickCount GetCurrentThread GlobalAlloc lstrcmpA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA GetModuleFileNameA SizeofResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcatA lstrcmpW lstrcpynA GetModuleHandleA GlobalLock GlobalUnlock GlobalFree FindResourceA LoadResource LockResource FreeResource GetVersion GetVersionExA CompareStringA GetThreadLocale lstrcmpiA GetLastError InterlockedExchange GetStringTypeExA MultiByteToWideChar GetACP CompareStringW WideCharToMultiByte GetLocaleInfoA lstrlenA HeapFree GetProcessHeap HeapAlloc GetModuleHandleW FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr VirtualProtect SetLastError VirtualAlloc VirtualFree UnhandledExceptionFilter VirtualQuery

user32

MessageBeep DestroyIcon ReleaseCapture LoadAcceleratorsA InsertMenuItemA CreatePopupMenu SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorA ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetMenuItemBitmaps ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA SendDlgItemMessageA GetFocus IsChild GetForegroundWindow GetLastActivePopup DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos LoadIconA PeekMessageA MapWindowPoints ScrollWindow MessageBoxA TrackPopupMenu GetKeyState GetMenuItemInfoA GetScrollRange SetForegroundWindow ShowScrollBar IsWindowVisible GetClientRect GetMenu PostMessageA GetNextDlgGroupItem GetMenuItemID GetMenuItemCount GetSysColor AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetScrollInfo SetScrollInfo GetClassInfoA RegisterClassA UnregisterClassA GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect CopyRect PtInRect wsprintfA GetWindowTextLengthA GetWindowTextA GetSysColorBrush EndPaint BeginPaint GetWindowDC GrayStringA DrawTextExA DrawTextA TabbedTextOutA InflateRect LoadCursorA SetCapture KillTimer SetTimer ClientToScreen SetWindowRgn GetScrollPos SetScrollPos GetWindow SetFocus GetDesktopWindow GetActiveWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow IsWindow GetWindowLongA GetDlgItem IsWindowEnabled GetParent InvalidateRgn CopyAcceleratorTableA CharNextA PostThreadMessageA LockWindowUpdate GetDCEx GetNextDlgTabItem EndDialog CharUpperA LoadBitmapA InvalidateRect GetDC SendMessageA UpdateWindow EnableWindow WindowFromPoint SetRect GetSubMenu DrawIcon FillRect FindWindowA GetMenuStringA InsertMenuA ShowOwnedPopups GetMessageA TranslateMessage GetCursorPos ValidateRect SetWindowContextHelpId MapDialogRect RegisterClipboardFormatA PostQuitMessage SetParent GetSystemMenu AppendMenuA DeleteMenu IsRectEmpty ReleaseDC IsZoomed LoadMenuA DestroyMenu UnpackDDElParam SetScrollRange SetCursor ReuseDDElParam

gdi32

CombineRgn GetMapMode PatBlt CreatePatternBrush SaveDC RestoreDC SetBkMode SetMapMode ExcludeClipRect IntersectClipRect LineTo MoveToEx SelectClipRgn GetViewportExtEx GetWindowExtEx BitBlt GetPixel PtVisible RectVisible TextOutA SetRectRgn SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn GetStockObject CreateSolidBrush GetBkColor GetTextColor GetRgnBox CreateRectRgnIndirect CreateRectRgn CreateFontIndirectA ExtTextOutA Ellipse LPtoDP CreateEllipticRgn GetDeviceCaps CreateFontA GetCharWidthA DeleteObject StretchDIBits DeleteDC GetTextExtentPoint32A GetTextMetricsA CreateCompatibleBitmap CreateBitmap GetObjectA SetBkColor SetTextColor GetClipBox Escape CreateCompatibleDC SelectObject

msimg32

TransparentBlt

comdlg32

GetSaveFileNameA GetFileTitleA GetOpenFileNameA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegSetValueA RegQueryValueExA RegOpenKeyExA RegCreateKeyExA RegSetValueExA RegDeleteValueA RegDeleteKeyA RegEnumKeyA RegOpenKeyA RegQueryValueA SetFileSecurityA RegCreateKeyA RegCloseKey GetFileSecurityA

shell32

DragFinish DragQueryFileA ExtractIconA SHGetFileInfoA DragAcceptFiles

comctl32

ord17 ImageList_Draw ImageList_GetImageInfo ImageList_Destroy

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CoTaskMemAlloc CoGetClassObject CoTaskMemFree CLSIDFromString CLSIDFromProgID OleInitialize CoFreeUnusedLibraries OleUninitialize CoRevokeClassObject OleIsCurrentClipboard OleFlushClipboard CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoRegisterMessageFilter

oleaut32

SysAllocStringLen SysFreeString SysStringLen SysAllocStringByteLen OleCreateFontIndirect SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy VariantInit VariantClear VariantChangeType