emotet_exe_e5_b495360d283341f0c79931dfbf9fd115a25ce6ca519660dba0d0a33cd2196e99_2022-01-21__111754[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e5_b495360d283341f0c79931dfbf9fd115a25ce6ca519660dba0d0a33cd2196e99_2022-01-21__111754.exe
Size 620KB
Sample220121-neb7bscea7
SHA256 b495360d283341f0c79931dfbf9fd115a25ce6ca519660dba0d0a33cd2196e99
MD5 524f5a09993a7282cebbeee1f015788f
SHA1 3c46c690047f7116a2ba4bc0729c16121d609944
SHA512 42fef2a7df6349d28264b7c711e92c95f58c045ab389cb2d54a0ef2c39ab2b51a5e33fb7b9d5d160b77374bf55793d344a55f812791a0031f50dd831c36c69cb
SSDEEP 12288:vClISqMT89ornPmGZtn5yzrD+1ywIdO3D7AfojAxOBnVV0KOFD3EPO7:vmTWornPDryzraywIdOz7AfOAxsVZOF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e5_b495360d283341f0c79931dfbf9fd115a25ce6ca519660dba0d0a33cd2196e99_2022-01-21__111754.exe

.dll 620KB

emotet_exe_e5_b495360d283341f0c79931dfbf9fd115a25ce6ca519660dba0d0a33cd2196e99_2022-01-21__111754.exe

IMPHASH 24b46ffcf60dc8d39e8124f411ebd08e
SHA256 b495360d283341f0c79931dfbf9fd115a25ce6ca519660dba0d0a33cd2196e99
MD5 524f5a09993a7282cebbeee1f015788f
SHA1 3c46c690047f7116a2ba4bc0729c16121d609944
SHA512 42fef2a7df6349d28264b7c711e92c95f58c045ab389cb2d54a0ef2c39ab2b51a5e33fb7b9d5d160b77374bf55793d344a55f812791a0031f50dd831c36c69cb
SSDEEP 12288:vClISqMT89ornPmGZtn5yzrD+1ywIdO3D7AfojAxOBnVV0KOFD3EPO7:vmTWornPDryzraywIdOz7AfOAxsVZOF
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

214396

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileA FileTimeToSystemTime FileTimeToLocalFileTime LocalFileTimeToFileTime SystemTimeToFileTime TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetSystemInfo HeapReAlloc GetCommandLineA RtlUnwind RaiseException ExitProcess HeapSize HeapDestroy HeapCreate GetStdHandle Sleep SetHandleCount GetFileType GetStartupInfoA GetShortPathNameA GetConsoleMode GetACP FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetStringTypeA GetStringTypeW GetTimeZoneInformation WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle LCMapStringA LCMapStringW SetEnvironmentVariableA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetThreadLocale GetCurrentDirectoryA GetOEMCP GetCPInfo InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags InterlockedDecrement FormatMessageA LocalFree MulDiv GetDiskFreeSpaceA GetFullPathNameA GetTempFileNameA GetFileTime SetFileTime GetFileAttributesA CloseHandle GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA GetTickCount GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA lstrcmpA GlobalAlloc GetCurrentProcessId GetModuleFileNameA GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcmpW GetModuleHandleA GetVersionExA SizeofResource GlobalLock GlobalUnlock GlobalFree FindResourceA LoadResource LockResource FreeResource GetVersion CompareStringA lstrcmpiA GetLastError InterlockedExchange GetStringTypeExA MultiByteToWideChar CompareStringW WideCharToMultiByte lstrlenA HeapFree GetProcessHeap HeapAlloc GetModuleHandleW FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr VirtualProtect SetLastError VirtualAlloc VirtualFree GetConsoleCP VirtualQuery

user32

SetRect WindowFromPoint GetDCEx LockWindowUpdate PostThreadMessageA CharNextA CopyAcceleratorTableA InvalidateRgn GetNextDlgGroupItem MessageBeep DestroyIcon UnregisterClassA MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetMenuItemBitmaps GetMenuCheckMarkDimensions ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem GetWindowThreadProcessId RegisterWindowMessageA LoadIconA SendDlgItemMessageA WinHelpA IsChild GetCapture SetWindowsHookExA CallNextHookEx GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA GetFocus GetForegroundWindow GetLastActivePopup DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints ScrollWindow TrackPopupMenu GetKeyState SetScrollRange GetScrollRange InflateRect ShowScrollBar IsWindowVisible GetClientRect PostMessageA GetSubMenu GetMenuItemID GetMenuItemCount MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos CopyRect GetScrollInfo SetScrollInfo PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect GetWindowTextLengthA GetWindowTextA GetScrollPos SetScrollPos GetWindow SetFocus GetDesktopWindow GetActiveWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamA LoadCursorA SetCapture EnableWindow KillTimer SetTimer ClientToScreen SetWindowRgn DrawIcon DestroyWindow IsWindow GetWindowLongA GetDlgItem IsWindowEnabled GetParent GetNextDlgTabItem EndDialog CharUpperA LoadBitmapA InvalidateRect GetDC GetMenuItemInfoA GetSysColorBrush EndPaint BeginPaint SendMessageA UpdateWindow GetWindowDC GrayStringA DrawTextExA DrawTextA GetMenu TabbedTextOutA FillRect FindWindowA GetMenuStringA InsertMenuA ShowOwnedPopups GetMessageA TranslateMessage GetCursorPos ValidateRect SetWindowContextHelpId MapDialogRect RegisterClipboardFormatA PostQuitMessage SetParent GetSystemMenu AppendMenuA DeleteMenu IsRectEmpty ReleaseDC IsZoomed UnpackDDElParam ReuseDDElParam LoadMenuA DestroyMenu SetCursor ReleaseCapture LoadAcceleratorsA InsertMenuItemA CreatePopupMenu SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorA SetForegroundWindow ShowWindow

gdi32

CreateEllipticRgn LPtoDP Ellipse ExtTextOutA CreateFontIndirectA CreateRectRgn CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode PatBlt CreatePatternBrush SaveDC RestoreDC SetBkMode SetMapMode ExcludeClipRect IntersectClipRect LineTo MoveToEx SelectClipRgn GetViewportExtEx GetWindowExtEx BitBlt GetPixel PtVisible RectVisible TextOutA Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn GetStockObject CreateSolidBrush GetBkColor GetTextColor GetRgnBox GetDeviceCaps StretchDIBits DeleteDC CreateFontA GetCharWidthA DeleteObject GetTextExtentPoint32A GetTextMetricsA CreateCompatibleBitmap CreateBitmap GetObjectA SetBkColor SetTextColor GetClipBox CreateCompatibleDC SelectObject

msimg32

TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegEnumKeyA RegCreateKeyA RegSetValueA GetFileSecurityA SetFileSecurityA RegQueryValueA RegOpenKeyA RegCloseKey RegDeleteKeyA RegDeleteValueA RegSetValueExA RegCreateKeyExA RegOpenKeyExA RegQueryValueExA

shell32

DragFinish DragQueryFileA ExtractIconA SHGetFileInfoA DragAcceptFiles

comctl32

ord17

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

StgOpenStorageOnILockBytes CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject CoGetClassObject CoTaskMemAlloc StgCreateDocfileOnILockBytes CoTaskMemFree CLSIDFromString CLSIDFromProgID OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal

oleaut32

SysAllocStringLen SysFreeString SysStringLen SysAllocStringByteLen OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantInit VariantCopy VariantClear VariantChangeType