emotet_exe_e4_0bf073b3ef5995325d6b93b8cb6f7b9d092902f9f5d3cf1615f2139f96d4111c_2022-01-25__133439[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e4_0bf073b3ef5995325d6b93b8cb6f7b9d092902f9f5d3cf1615f2139f96d4111c_2022-01-25__133439.exe
Size 588KB
Sample220125-qv9hwaggf8
SHA256 0bf073b3ef5995325d6b93b8cb6f7b9d092902f9f5d3cf1615f2139f96d4111c
MD5 a1988bcfb411a72de2d5bcbe24530521
SHA1 b90fc72c20c0fb655a40f840423a3a7de0b15efa
SHA512 d05627278a8f3d94eedab0551f52533c510de632210c46d588897b923d1985bed0d013cca19f3dbc39411fabb47b3664646ead3bf7e4bf1a4aba98f528607980
SSDEEP 12288:ykrMviH2ihj94wyHz4MmNihUEOH2KZ6psjQxGuTe5:/MaH994UAgH2T+ElT2
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_0bf073b3ef5995325d6b93b8cb6f7b9d092902f9f5d3cf1615f2139f96d4111c_2022-01-25__133439.exe

.dll 588KB

emotet_exe_e4_0bf073b3ef5995325d6b93b8cb6f7b9d092902f9f5d3cf1615f2139f96d4111c_2022-01-25__133439.exe

IMPHASH 4b3c6568be69655a83355a8193247571
SHA256 0bf073b3ef5995325d6b93b8cb6f7b9d092902f9f5d3cf1615f2139f96d4111c
MD5 a1988bcfb411a72de2d5bcbe24530521
SHA1 b90fc72c20c0fb655a40f840423a3a7de0b15efa
SHA512 d05627278a8f3d94eedab0551f52533c510de632210c46d588897b923d1985bed0d013cca19f3dbc39411fabb47b3664646ead3bf7e4bf1a4aba98f528607980
SSDEEP 12288:ykrMviH2ihj94wyHz4MmNihUEOH2KZ6psjQxGuTe5:/MaH994UAgH2T+ElT2
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

93760

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemTimeAsFileTime GetTimeFormatA GetDateFormatA GetSystemInfo GetCommandLineA ExitProcess RtlUnwind HeapReAlloc TerminateProcess SetStdHandle GetFileType HeapSize GetTimeZoneInformation LCMapStringA LCMapStringW HeapDestroy IsBadWritePtr GetStringTypeA GetStringTypeW SetHandleCount GetStdHandle GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW UnhandledExceptionFilter QueryPerformanceCounter GetCurrentProcessId SetUnhandledExceptionFilter IsBadCodePtr SetEnvironmentVariableA GetTickCount GetFileTime GetFileAttributesA FileTimeToLocalFileTime WritePrivateProfileStringA GetOEMCP GetCPInfo TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc FileTimeToSystemTime GlobalFlags DeleteCriticalSection InitializeCriticalSection RaiseException CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile CloseHandle GetCurrentThread lstrcmpA GetModuleFileNameA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA MulDiv GlobalAlloc FormatMessageA LocalFree GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcatA lstrcmpW lstrcpynA GetModuleHandleA GlobalLock GlobalUnlock GlobalFree FreeResource GetVersion CompareStringA lstrcmpiA CompareStringW GetLastError MultiByteToWideChar lstrlenA InterlockedDecrement InterlockedIncrement HeapFree GetProcessHeap HeapAlloc GetNativeSystemInfo FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr VirtualProtect SetLastError VirtualAlloc VirtualFree VirtualQuery Sleep FindResourceA LoadResource LockResource SizeofResource WideCharToMultiByte GetVersionExA GetThreadLocale GetLocaleInfoA GetACP HeapCreate InterlockedExchange

user32

PostThreadMessageA MessageBeep GetNextDlgGroupItem InvalidateRgn InvalidateRect CopyAcceleratorTableA SetRect IsRectEmpty CharNextA ReleaseCapture SetCapture LoadCursorA GetSysColorBrush EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA DestroyMenu SetCursor GetMessageA TranslateMessage GetCursorPos ValidateRect ReleaseDC GetDC SetWindowContextHelpId PostQuitMessage ShowWindow MoveWindow SetWindowTextA IsDialogMessageA wsprintfA SetMenuItemBitmaps ModifyMenuA GetMenuState EnableMenuItem RegisterClipboardFormatA GetMenuCheckMarkDimensions LoadBitmapA RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA SendDlgItemMessageA GetFocus SetFocus IsChild GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup DispatchMessageA GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA KillTimer SetTimer EnableWindow SendMessageA LoadIconA GetSystemMenu AppendMenuA GetClientRect IsIconic GetSystemMetrics DrawIcon MapDialogRect MapWindowPoints MessageBoxA GetKeyState SetForegroundWindow IsWindowVisible UpdateWindow GetMenu PostMessageA GetSubMenu GetMenuItemID GetMenuItemCount GetSysColor AdjustWindowRectEx EqualRect GetClassInfoA CheckMenuItem CharUpperA EndDialog GetNextDlgTabItem GetParent IsWindowEnabled GetDlgItem GetWindowLongA IsWindow DestroyWindow CreateDialogIndirectParamA SetActiveWindow GetActiveWindow GetDesktopWindow GetWindow PtInRect CopyRect GetWindowRect GetWindowPlacement SystemParametersInfoA IntersectRect OffsetRect SetWindowPos SetWindowLongA CallWindowProcA DefWindowProcA GetDlgCtrlID UnregisterClassA RegisterClassA

gdi32

GetBkColor GetTextColor GetRgnBox GetStockObject DeleteDC ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape TextOutA GetMapMode PtVisible GetWindowExtEx GetViewportExtEx DeleteObject SetMapMode RestoreDC SaveDC ExtTextOutA CreateRectRgnIndirect GetDeviceCaps CreateBitmap GetObjectA SetBkColor SetTextColor GetClipBox RectVisible

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegOpenKeyA RegQueryValueExA RegOpenKeyExA RegDeleteKeyA RegEnumKeyA RegQueryValueA RegCreateKeyExA RegSetValueExA RegCloseKey

comctl32

ord17 ImageList_Destroy

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CoGetClassObject CoTaskMemAlloc StgOpenStorageOnILockBytes CoTaskMemFree CLSIDFromProgID CLSIDFromString OleRun CoCreateInstance CoUninitialize CoInitialize StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal OleUninitialize CoFreeUnusedLibraries OleInitialize CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject

oleaut32

SysStringByteLen SysStringLen SysFreeString VariantInit VariantCopy VariantClear VariantChangeType SysAllocStringLen SafeArrayDestroy SystemTimeToVariantTime SysAllocString OleCreateFontIndirect GetErrorInfo SysAllocStringByteLen