emotet_exe_e4_cad7905fcf7bffb73e65f5112df0d62332efdd358266178c4f24ea76b2601f16_2022-01-21__000943[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e4_cad7905fcf7bffb73e65f5112df0d62332efdd358266178c4f24ea76b2601f16_2022-01-21__000943.exe
Size 624KB
Sample220121-af6wfacdfp
SHA256 cad7905fcf7bffb73e65f5112df0d62332efdd358266178c4f24ea76b2601f16
MD5 158dbb2ffb2b136470c288ebaba13317
SHA1 b5f7d3c711a1dae3316cef96cc476cd38595e49d
SHA512 5abe39b40dda68a4d131b518976f944d7b6f32378b7f245c6325852b251a6f61e707653db203f6faede2312dd53261d496dbb362d8f90ee674a68f1ed2ff4c28
SSDEEP 12288:Td0saabmsb61ZuV3ZGuyfEgXkvPLEbsWrxD8iP29pi9N3G1DjsgqXXvhhcwEPwq:68mi61ZuRZGuyfEgXkvPLEbsODYDxVn
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_cad7905fcf7bffb73e65f5112df0d62332efdd358266178c4f24ea76b2601f16_2022-01-21__000943.exe

.dll 624KB

emotet_exe_e4_cad7905fcf7bffb73e65f5112df0d62332efdd358266178c4f24ea76b2601f16_2022-01-21__000943.exe

IMPHASH 42bfc936e90bcc6f5b01541917ef37a4
SHA256 cad7905fcf7bffb73e65f5112df0d62332efdd358266178c4f24ea76b2601f16
MD5 158dbb2ffb2b136470c288ebaba13317
SHA1 b5f7d3c711a1dae3316cef96cc476cd38595e49d
SHA512 5abe39b40dda68a4d131b518976f944d7b6f32378b7f245c6325852b251a6f61e707653db203f6faede2312dd53261d496dbb362d8f90ee674a68f1ed2ff4c28
SSDEEP 12288:Td0saabmsb61ZuV3ZGuyfEgXkvPLEbsWrxD8iP29pi9N3G1DjsgqXXvhhcwEPwq:68mi61ZuRZGuyfEgXkvPLEbsODYDxVn
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

95798

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineA ExitProcess RtlUnwind TerminateProcess HeapReAlloc HeapSize HeapDestroy HeapCreate IsBadWritePtr SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemInfo QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeZoneInformation GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage SetStdHandle IsBadCodePtr GetLocaleInfoW SetEnvironmentVariableA SystemTimeToFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime FileTimeToSystemTime GetShortPathNameA CreateFileA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetCurrentDirectoryA GetOEMCP GetCPInfo InterlockedIncrement TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc GlobalFlags DeleteCriticalSection InitializeCriticalSection RaiseException InterlockedDecrement MulDiv FormatMessageA LocalFree GetDiskFreeSpaceA GetFullPathNameA GetTempFileNameA GetFileTime SetFileTime GetFileAttributesA CloseHandle GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA GetTickCount GetCurrentThread GlobalAlloc lstrcmpA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA GetModuleFileNameA SizeofResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcatA lstrcmpW lstrcpynA GetModuleHandleA GlobalLock GlobalUnlock GlobalFree FindResourceA LoadResource LockResource FreeResource GetVersion GetVersionExA CompareStringA GetThreadLocale lstrcmpiA GetLastError InterlockedExchange GetStringTypeExA MultiByteToWideChar GetACP CompareStringW WideCharToMultiByte GetLocaleInfoA lstrlenA HeapFree GetProcessHeap HeapAlloc GetModuleHandleW FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr VirtualProtect SetLastError VirtualAlloc VirtualFree UnhandledExceptionFilter VirtualQuery

user32

MessageBeep DestroyIcon ReleaseCapture LoadAcceleratorsA InsertMenuItemA CreatePopupMenu SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorA ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetMenuItemBitmaps ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA SendDlgItemMessageA GetFocus IsChild GetForegroundWindow GetLastActivePopup DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos LoadIconA PeekMessageA MapWindowPoints ScrollWindow MessageBoxA TrackPopupMenu GetKeyState GetMenuItemInfoA GetScrollRange SetForegroundWindow ShowScrollBar IsWindowVisible GetClientRect GetMenu PostMessageA GetNextDlgGroupItem GetMenuItemID GetMenuItemCount GetSysColor AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetScrollInfo SetScrollInfo GetClassInfoA RegisterClassA UnregisterClassA GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect CopyRect PtInRect wsprintfA GetWindowTextLengthA GetWindowTextA GetSysColorBrush EndPaint BeginPaint GetWindowDC GrayStringA DrawTextExA DrawTextA TabbedTextOutA InflateRect LoadCursorA SetCapture KillTimer SetTimer ClientToScreen SetWindowRgn GetScrollPos SetScrollPos GetWindow SetFocus GetDesktopWindow GetActiveWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow IsWindow GetWindowLongA GetDlgItem IsWindowEnabled GetParent InvalidateRgn CopyAcceleratorTableA CharNextA PostThreadMessageA LockWindowUpdate GetDCEx GetNextDlgTabItem EndDialog CharUpperA LoadBitmapA InvalidateRect GetDC SendMessageA UpdateWindow EnableWindow WindowFromPoint SetRect GetSubMenu DrawIcon FillRect FindWindowA GetMenuStringA InsertMenuA ShowOwnedPopups GetMessageA TranslateMessage GetCursorPos ValidateRect SetWindowContextHelpId MapDialogRect RegisterClipboardFormatA PostQuitMessage SetParent GetSystemMenu AppendMenuA DeleteMenu IsRectEmpty ReleaseDC IsZoomed LoadMenuA DestroyMenu UnpackDDElParam SetScrollRange SetCursor ReuseDDElParam

gdi32

CombineRgn GetMapMode PatBlt CreatePatternBrush SaveDC RestoreDC SetBkMode SetMapMode ExcludeClipRect IntersectClipRect LineTo MoveToEx SelectClipRgn GetViewportExtEx GetWindowExtEx BitBlt GetPixel PtVisible RectVisible TextOutA SetRectRgn SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn GetStockObject CreateSolidBrush GetBkColor GetTextColor GetRgnBox CreateRectRgnIndirect CreateRectRgn CreateFontIndirectA ExtTextOutA Ellipse LPtoDP CreateEllipticRgn GetDeviceCaps CreateFontA GetCharWidthA DeleteObject StretchDIBits DeleteDC GetTextExtentPoint32A GetTextMetricsA CreateCompatibleBitmap CreateBitmap GetObjectA SetBkColor SetTextColor GetClipBox Escape CreateCompatibleDC SelectObject

msimg32

TransparentBlt

comdlg32

GetSaveFileNameA GetFileTitleA GetOpenFileNameA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegSetValueA RegQueryValueExA RegOpenKeyExA RegCreateKeyExA RegSetValueExA RegDeleteValueA RegDeleteKeyA RegEnumKeyA RegOpenKeyA RegQueryValueA SetFileSecurityA RegCreateKeyA RegCloseKey GetFileSecurityA

shell32

DragFinish DragQueryFileA ExtractIconA SHGetFileInfoA DragAcceptFiles

comctl32

ord17 ImageList_Draw ImageList_GetImageInfo ImageList_Destroy

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CoTaskMemAlloc CoGetClassObject CoTaskMemFree CLSIDFromString CLSIDFromProgID OleInitialize CoFreeUnusedLibraries OleUninitialize CoRevokeClassObject OleIsCurrentClipboard OleFlushClipboard CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoRegisterMessageFilter

oleaut32

SysAllocStringLen SysFreeString SysStringLen SysAllocStringByteLen OleCreateFontIndirect SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy VariantInit VariantClear VariantChangeType