emotet_exe_e4_aa58a0f326f462c598143bf5dbf02fa86679fccff9b3e41b5e0caef5c9caf512_2022-01-25__133439[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e4_aa58a0f326f462c598143bf5dbf02fa86679fccff9b3e41b5e0caef5c9caf512_2022-01-25__133439.exe
Size 588KB
Sample220125-qv9hwaggf7
SHA256 aa58a0f326f462c598143bf5dbf02fa86679fccff9b3e41b5e0caef5c9caf512
MD5 6e5efa3e15614ee4aaf2bd3a9f40dd97
SHA1 d639573c83ae38e077ccbbc947afd8d63aca0976
SHA512 bc3979fc648e3da47de2b53c685b650325baf7515d8775e008e37124381c7e1970b74fd4a1e2b96af810c8321575657d32c6d832331931e89f445a289792c0a9
SSDEEP 12288:ykrMviH2ihj94wyHz4MmqihUEOH2KZ6psjQxGuTe5:/MaH994jAgH2T+ElT2
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_aa58a0f326f462c598143bf5dbf02fa86679fccff9b3e41b5e0caef5c9caf512_2022-01-25__133439.exe

.dll 588KB

emotet_exe_e4_aa58a0f326f462c598143bf5dbf02fa86679fccff9b3e41b5e0caef5c9caf512_2022-01-25__133439.exe

IMPHASH 4b3c6568be69655a83355a8193247571
SHA256 aa58a0f326f462c598143bf5dbf02fa86679fccff9b3e41b5e0caef5c9caf512
MD5 6e5efa3e15614ee4aaf2bd3a9f40dd97
SHA1 d639573c83ae38e077ccbbc947afd8d63aca0976
SHA512 bc3979fc648e3da47de2b53c685b650325baf7515d8775e008e37124381c7e1970b74fd4a1e2b96af810c8321575657d32c6d832331931e89f445a289792c0a9
SSDEEP 12288:ykrMviH2ihj94wyHz4MmqihUEOH2KZ6psjQxGuTe5:/MaH994jAgH2T+ElT2
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

93760

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemTimeAsFileTime GetTimeFormatA GetDateFormatA GetSystemInfo GetCommandLineA ExitProcess RtlUnwind HeapReAlloc TerminateProcess SetStdHandle GetFileType HeapSize GetTimeZoneInformation LCMapStringA LCMapStringW HeapDestroy IsBadWritePtr GetStringTypeA GetStringTypeW SetHandleCount GetStdHandle GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW UnhandledExceptionFilter QueryPerformanceCounter GetCurrentProcessId SetUnhandledExceptionFilter IsBadCodePtr SetEnvironmentVariableA GetTickCount GetFileTime GetFileAttributesA FileTimeToLocalFileTime WritePrivateProfileStringA GetOEMCP GetCPInfo TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc FileTimeToSystemTime GlobalFlags DeleteCriticalSection InitializeCriticalSection RaiseException CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile CloseHandle GetCurrentThread lstrcmpA GetModuleFileNameA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA MulDiv GlobalAlloc FormatMessageA LocalFree GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcatA lstrcmpW lstrcpynA GetModuleHandleA GlobalLock GlobalUnlock GlobalFree FreeResource GetVersion CompareStringA lstrcmpiA CompareStringW GetLastError MultiByteToWideChar lstrlenA InterlockedDecrement InterlockedIncrement HeapFree GetProcessHeap HeapAlloc GetNativeSystemInfo FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr VirtualProtect SetLastError VirtualAlloc VirtualFree VirtualQuery Sleep FindResourceA LoadResource LockResource SizeofResource WideCharToMultiByte GetVersionExA GetThreadLocale GetLocaleInfoA GetACP HeapCreate InterlockedExchange

user32

PostThreadMessageA MessageBeep GetNextDlgGroupItem InvalidateRgn InvalidateRect CopyAcceleratorTableA SetRect IsRectEmpty CharNextA ReleaseCapture SetCapture LoadCursorA GetSysColorBrush EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA DestroyMenu SetCursor GetMessageA TranslateMessage GetCursorPos ValidateRect ReleaseDC GetDC SetWindowContextHelpId PostQuitMessage ShowWindow MoveWindow SetWindowTextA IsDialogMessageA wsprintfA SetMenuItemBitmaps ModifyMenuA GetMenuState EnableMenuItem RegisterClipboardFormatA GetMenuCheckMarkDimensions LoadBitmapA RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA SendDlgItemMessageA GetFocus SetFocus IsChild GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup DispatchMessageA GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA KillTimer SetTimer EnableWindow SendMessageA LoadIconA GetSystemMenu AppendMenuA GetClientRect IsIconic GetSystemMetrics DrawIcon MapDialogRect MapWindowPoints MessageBoxA GetKeyState SetForegroundWindow IsWindowVisible UpdateWindow GetMenu PostMessageA GetSubMenu GetMenuItemID GetMenuItemCount GetSysColor AdjustWindowRectEx EqualRect GetClassInfoA CheckMenuItem CharUpperA EndDialog GetNextDlgTabItem GetParent IsWindowEnabled GetDlgItem GetWindowLongA IsWindow DestroyWindow CreateDialogIndirectParamA SetActiveWindow GetActiveWindow GetDesktopWindow GetWindow PtInRect CopyRect GetWindowRect GetWindowPlacement SystemParametersInfoA IntersectRect OffsetRect SetWindowPos SetWindowLongA CallWindowProcA DefWindowProcA GetDlgCtrlID UnregisterClassA RegisterClassA

gdi32

GetBkColor GetTextColor GetRgnBox GetStockObject DeleteDC ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape TextOutA GetMapMode PtVisible GetWindowExtEx GetViewportExtEx DeleteObject SetMapMode RestoreDC SaveDC ExtTextOutA CreateRectRgnIndirect GetDeviceCaps CreateBitmap GetObjectA SetBkColor SetTextColor GetClipBox RectVisible

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegOpenKeyA RegQueryValueExA RegOpenKeyExA RegDeleteKeyA RegEnumKeyA RegQueryValueA RegCreateKeyExA RegSetValueExA RegCloseKey

comctl32

ord17 ImageList_Destroy

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CoGetClassObject CoTaskMemAlloc StgOpenStorageOnILockBytes CoTaskMemFree CLSIDFromProgID CLSIDFromString OleRun CoCreateInstance CoUninitialize CoInitialize StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal OleUninitialize CoFreeUnusedLibraries OleInitialize CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject

oleaut32

SysStringByteLen SysStringLen SysFreeString VariantInit VariantCopy VariantClear VariantChangeType SysAllocStringLen SafeArrayDestroy SystemTimeToVariantTime SysAllocString OleCreateFontIndirect GetErrorInfo SysAllocStringByteLen