emotet_exe_e4_32d71385e940bb47de0bb12ef1280ec8266854127ec9fffbe344cdac70705fbc_2022-01-21__000943[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e4_32d71385e940bb47de0bb12ef1280ec8266854127ec9fffbe344cdac70705fbc_2022-01-21__000943.exe
Size 624KB
Sample220121-af667scdgj
SHA256 32d71385e940bb47de0bb12ef1280ec8266854127ec9fffbe344cdac70705fbc
MD5 60755e943c4921c5b802a00ccc97bad7
SHA1 a941f09783eb2df290f626e6ea313b514f45c9c9
SHA512 2a7c9daba44d44da7071c9631e0fd63f328d74db497b5073a01f0aa36e33bb1eb6dd65df01735c7aa1224e8c0002dacaf3eb3602adb37a8a20ab4bc5490d5f87
SSDEEP 12288:Td0saabmsb61ZuV3ZGuyfEgXkvPLEbsWrxD8iP29pi9NGG1DjsgqXXvhhcwEPwq:68mi61ZuRZGuyfEgXkvPLEbsODYDMVn
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_32d71385e940bb47de0bb12ef1280ec8266854127ec9fffbe344cdac70705fbc_2022-01-21__000943.exe

.dll 624KB

emotet_exe_e4_32d71385e940bb47de0bb12ef1280ec8266854127ec9fffbe344cdac70705fbc_2022-01-21__000943.exe

IMPHASH 42bfc936e90bcc6f5b01541917ef37a4
SHA256 32d71385e940bb47de0bb12ef1280ec8266854127ec9fffbe344cdac70705fbc
MD5 60755e943c4921c5b802a00ccc97bad7
SHA1 a941f09783eb2df290f626e6ea313b514f45c9c9
SHA512 2a7c9daba44d44da7071c9631e0fd63f328d74db497b5073a01f0aa36e33bb1eb6dd65df01735c7aa1224e8c0002dacaf3eb3602adb37a8a20ab4bc5490d5f87
SSDEEP 12288:Td0saabmsb61ZuV3ZGuyfEgXkvPLEbsWrxD8iP29pi9NGG1DjsgqXXvhhcwEPwq:68mi61ZuRZGuyfEgXkvPLEbsODYDMVn
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

95798

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineA ExitProcess RtlUnwind TerminateProcess HeapReAlloc HeapSize HeapDestroy HeapCreate IsBadWritePtr SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemInfo QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeZoneInformation GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage SetStdHandle IsBadCodePtr GetLocaleInfoW SetEnvironmentVariableA SystemTimeToFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime FileTimeToSystemTime GetShortPathNameA CreateFileA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetCurrentDirectoryA GetOEMCP GetCPInfo InterlockedIncrement TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc GlobalFlags DeleteCriticalSection InitializeCriticalSection RaiseException InterlockedDecrement MulDiv FormatMessageA LocalFree GetDiskFreeSpaceA GetFullPathNameA GetTempFileNameA GetFileTime SetFileTime GetFileAttributesA CloseHandle GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA GetTickCount GetCurrentThread GlobalAlloc lstrcmpA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA GetModuleFileNameA SizeofResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcatA lstrcmpW lstrcpynA GetModuleHandleA GlobalLock GlobalUnlock GlobalFree FindResourceA LoadResource LockResource FreeResource GetVersion GetVersionExA CompareStringA GetThreadLocale lstrcmpiA GetLastError InterlockedExchange GetStringTypeExA MultiByteToWideChar GetACP CompareStringW WideCharToMultiByte GetLocaleInfoA lstrlenA HeapFree GetProcessHeap HeapAlloc GetModuleHandleW FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr VirtualProtect SetLastError VirtualAlloc VirtualFree UnhandledExceptionFilter VirtualQuery

user32

MessageBeep DestroyIcon ReleaseCapture LoadAcceleratorsA InsertMenuItemA CreatePopupMenu SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorA ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetMenuItemBitmaps ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA SendDlgItemMessageA GetFocus IsChild GetForegroundWindow GetLastActivePopup DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos LoadIconA PeekMessageA MapWindowPoints ScrollWindow MessageBoxA TrackPopupMenu GetKeyState GetMenuItemInfoA GetScrollRange SetForegroundWindow ShowScrollBar IsWindowVisible GetClientRect GetMenu PostMessageA GetNextDlgGroupItem GetMenuItemID GetMenuItemCount GetSysColor AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetScrollInfo SetScrollInfo GetClassInfoA RegisterClassA UnregisterClassA GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect CopyRect PtInRect wsprintfA GetWindowTextLengthA GetWindowTextA GetSysColorBrush EndPaint BeginPaint GetWindowDC GrayStringA DrawTextExA DrawTextA TabbedTextOutA InflateRect LoadCursorA SetCapture KillTimer SetTimer ClientToScreen SetWindowRgn GetScrollPos SetScrollPos GetWindow SetFocus GetDesktopWindow GetActiveWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow IsWindow GetWindowLongA GetDlgItem IsWindowEnabled GetParent InvalidateRgn CopyAcceleratorTableA CharNextA PostThreadMessageA LockWindowUpdate GetDCEx GetNextDlgTabItem EndDialog CharUpperA LoadBitmapA InvalidateRect GetDC SendMessageA UpdateWindow EnableWindow WindowFromPoint SetRect GetSubMenu DrawIcon FillRect FindWindowA GetMenuStringA InsertMenuA ShowOwnedPopups GetMessageA TranslateMessage GetCursorPos ValidateRect SetWindowContextHelpId MapDialogRect RegisterClipboardFormatA PostQuitMessage SetParent GetSystemMenu AppendMenuA DeleteMenu IsRectEmpty ReleaseDC IsZoomed LoadMenuA DestroyMenu UnpackDDElParam SetScrollRange SetCursor ReuseDDElParam

gdi32

CombineRgn GetMapMode PatBlt CreatePatternBrush SaveDC RestoreDC SetBkMode SetMapMode ExcludeClipRect IntersectClipRect LineTo MoveToEx SelectClipRgn GetViewportExtEx GetWindowExtEx BitBlt GetPixel PtVisible RectVisible TextOutA SetRectRgn SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn GetStockObject CreateSolidBrush GetBkColor GetTextColor GetRgnBox CreateRectRgnIndirect CreateRectRgn CreateFontIndirectA ExtTextOutA Ellipse LPtoDP CreateEllipticRgn GetDeviceCaps CreateFontA GetCharWidthA DeleteObject StretchDIBits DeleteDC GetTextExtentPoint32A GetTextMetricsA CreateCompatibleBitmap CreateBitmap GetObjectA SetBkColor SetTextColor GetClipBox Escape CreateCompatibleDC SelectObject

msimg32

TransparentBlt

comdlg32

GetSaveFileNameA GetFileTitleA GetOpenFileNameA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegSetValueA RegQueryValueExA RegOpenKeyExA RegCreateKeyExA RegSetValueExA RegDeleteValueA RegDeleteKeyA RegEnumKeyA RegOpenKeyA RegQueryValueA SetFileSecurityA RegCreateKeyA RegCloseKey GetFileSecurityA

shell32

DragFinish DragQueryFileA ExtractIconA SHGetFileInfoA DragAcceptFiles

comctl32

ord17 ImageList_Draw ImageList_GetImageInfo ImageList_Destroy

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CoTaskMemAlloc CoGetClassObject CoTaskMemFree CLSIDFromString CLSIDFromProgID OleInitialize CoFreeUnusedLibraries OleUninitialize CoRevokeClassObject OleIsCurrentClipboard OleFlushClipboard CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoRegisterMessageFilter

oleaut32

SysAllocStringLen SysFreeString SysStringLen SysAllocStringByteLen OleCreateFontIndirect SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy VariantInit VariantClear VariantChangeType