emotet_exe_e4_7338deb6c9d7704fa8f9db46c30e609e7dddb101e87919f0b65d6df6c8630e91_2022-01-25__151737[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e4_7338deb6c9d7704fa8f9db46c30e609e7dddb101e87919f0b65d6df6c8630e91_2022-01-25__151737.exe
Size 660KB
Sample220125-spmg9saag2
SHA256 7338deb6c9d7704fa8f9db46c30e609e7dddb101e87919f0b65d6df6c8630e91
MD5 4f8b5ccb0af2940cb46111e27ad24038
SHA1 1fb2ec7f33f4096b6b8820345c87d724e0898dc4
SHA512 64202199fc210fa7c502d173543cf3d70c141ded198ddc1651b31a8e52286e05414508ff4cb18ec891f81f87612a15f1cc5af09085a518f97a7ecddbe1b6f63b
SSDEEP 12288:tGv8HbMqGJOMFfp76mfz9hzJ8Yd4lZNACHKm2tkJV8u:o87vGJzomxhwXbKZ+8
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_7338deb6c9d7704fa8f9db46c30e609e7dddb101e87919f0b65d6df6c8630e91_2022-01-25__151737.exe

.dll 660KB

emotet_exe_e4_7338deb6c9d7704fa8f9db46c30e609e7dddb101e87919f0b65d6df6c8630e91_2022-01-25__151737.exe

IMPHASH 5292b0afb12939cb3a86034c8a283858
SHA256 7338deb6c9d7704fa8f9db46c30e609e7dddb101e87919f0b65d6df6c8630e91
MD5 4f8b5ccb0af2940cb46111e27ad24038
SHA1 1fb2ec7f33f4096b6b8820345c87d724e0898dc4
SHA512 64202199fc210fa7c502d173543cf3d70c141ded198ddc1651b31a8e52286e05414508ff4cb18ec891f81f87612a15f1cc5af09085a518f97a7ecddbe1b6f63b
SSDEEP 12288:tGv8HbMqGJOMFfp76mfz9hzJ8Yd4lZNACHKm2tkJV8u:o87vGJzomxhwXbKZ+8
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

111749

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW UnhandledExceptionFilter QueryPerformanceCounter GetCurrentProcessId SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetFileType GetTimeZoneInformation SetStdHandle GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage IsBadCodePtr GetLocaleInfoW SetEnvironmentVariableA GetStdHandle SetHandleCount IsBadWritePtr HeapCreate HeapDestroy HeapSize HeapReAlloc TerminateProcess RtlUnwind ExitProcess GetCommandLineA GetSystemInfo GetSystemTimeAsFileTime GetTickCount SystemTimeToFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime FileTimeToSystemTime GetOEMCP GetCPInfo GetShortPathNameA CreateFileA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc DeleteCriticalSection InitializeCriticalSection RaiseException GlobalFlags InterlockedDecrement InterlockedIncrement GetCurrentDirectoryA FormatMessageA LocalFree MulDiv GetDiskFreeSpaceA GetFullPathNameA GetTempFileNameA GetFileTime SetFileTime GetFileAttributesA GlobalGetAtomNameA GlobalFindAtomA lstrcatA lstrcmpW CloseHandle lstrcpynA GlobalAddAtomA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA FindResourceA LockResource FreeResource GlobalFree GlobalUnlock GetCurrentThread GetCurrentThreadId GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA GetModuleFileNameA GetModuleHandleA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA GetVersion GetVersionExA CompareStringA GetThreadLocale lstrcmpiA GetLastError InterlockedExchange GetStringTypeExA MultiByteToWideChar GetACP CompareStringW WideCharToMultiByte GetLocaleInfoA lstrlenA SizeofResource LoadResource FindResourceW HeapFree GetProcessHeap HeapAlloc GetNativeSystemInfo FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr VirtualProtect SetLastError VirtualAlloc VirtualFree GetStringTypeW VirtualQuery

user32

LoadMenuA DestroyMenu UnpackDDElParam ReuseDDElParam ReleaseCapture LoadAcceleratorsA InsertMenuItemA CreatePopupMenu SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorA RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA IsChild GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos LoadIconA MapWindowPoints ScrollWindow TrackPopupMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar GetClientRect GetMenu GetSubMenu GetMenuItemID GetMenuItemCount GetSysColor AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetScrollInfo SetScrollInfo GetClassInfoA RegisterClassA UnregisterClassA DefWindowProcA CallWindowProcA OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement CopyRect PtInRect MessageBoxA GetLastActivePopup ShowOwnedPopups SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA SetRect GetKeyState PeekMessageA GetCursorPos ValidateRect SetMenuItemBitmaps ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA GetDesktopWindow GetActiveWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow IsWindow GetNextDlgTabItem EndDialog GetWindowTextLengthA GetWindowTextA GetFocus SetFocus IsWindowEnabled ShowWindow MoveWindow SetWindowLongA GetDlgCtrlID SetWindowTextA GetWindowLongA IsDialogMessageA SetDlgItemTextA RegisterClipboardFormatA WindowFromPoint RemoveMenu GetTabbedTextExtentA PostThreadMessageA CreateMenu SetParent SetWindowRgn DrawIcon FindWindowA GetMenuItemInfoA InflateRect SendDlgItemMessageA SendMessageA wsprintfA GetWindow SetWindowContextHelpId GetParent MapDialogRect SetWindowPos GetDlgItem PostMessageA DestroyCursor LoadCursorA ReleaseDC PostQuitMessage CharUpperA SetTimer KillTimer InvalidateRect GetWindowRect WindowFromDC EnableWindow UpdateWindow LockWindowUpdate GetDCEx IsWindowVisible GetSysColorBrush DestroyIcon MessageBeep GetNextDlgGroupItem SetCapture InvalidateRgn CopyAcceleratorTableA IsRectEmpty CharNextA DeleteMenu IsZoomed GetMenuStringA AppendMenuA InsertMenuA GetDC EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA SetCursor FillRect

gdi32

EndDoc DeleteDC CreateDCA GetViewportOrgEx PatBlt GetStockObject SaveDC RestoreDC SetBkMode SetPolyFillMode SetROP2 SetStretchBltMode SetMapMode ExcludeClipRect IntersectClipRect LineTo MoveToEx SetTextAlign DeleteObject SelectClipRgn CreateRectRgn GetViewportExtEx GetWindowExtEx PtVisible RectVisible TextOutA ExtTextOutA Escape SelectObject SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx AbortDoc ScaleWindowExtEx GetCurrentPositionEx ExtSelectClipRgn CreatePatternBrush CreateRectRgnIndirect GetTextMetricsA GetTextExtentPoint32A StretchDIBits GetCharWidthA CreateFontA GetTextColor GetRgnBox CreateFontIndirectA SetRectRgn CombineRgn GetMapMode CreateEllipticRgn LPtoDP GetNearestColor GetBkMode GetPolyFillMode GetROP2 GetStretchBltMode GetTextAlign GetTextFaceA GetWindowOrgEx SetAbortProc EndPage StartPage StartDocA DPtoLP GetDeviceCaps GetObjectA SetBkColor SetTextColor GetClipBox CreateBitmap Arc PolyBezier Polyline Polygon CreatePen RoundRect SetPixelV GetPixel Ellipse BitBlt GetBkColor CreateSolidBrush Rectangle SetWindowExtEx CreateCompatibleDC CreateCompatibleBitmap

comdlg32

GetOpenFileNameA GetSaveFileNameA PrintDlgA CommDlgExtendedError GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter GetJobA

advapi32

RegSetValueA RegQueryValueExA RegOpenKeyExA RegCreateKeyExA RegSetValueExA RegDeleteValueA RegDeleteKeyA RegEnumKeyA RegOpenKeyA RegQueryValueA SetFileSecurityA RegCreateKeyA RegCloseKey GetFileSecurityA

shell32

DragFinish ExtractIconA SHGetFileInfoA DragQueryFileA

comctl32

ord17 ImageList_Draw ImageList_GetImageInfo ImageList_Destroy

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CoRevokeClassObject OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter OleDestroyMenuDescriptor OleCreateMenuDescriptor IsAccelerator OleTranslateAccelerator CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoTaskMemAlloc CoTaskMemFree CLSIDFromString CLSIDFromProgID OleInitialize CoFreeUnusedLibraries OleUninitialize

oleaut32

SysFreeString VariantClear VariantChangeType VariantInit SysStringLen SysAllocStringByteLen OleCreateFontIndirect SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysAllocStringLen