emotet_exe_e5_371f75df743f39477ff4b1c9b32dac5603d663effce3d1f372f1cf2023b03e8d_2022-01-25__171329[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e5_371f75df743f39477ff4b1c9b32dac5603d663effce3d1f372f1cf2023b03e8d_2022-01-25__171329.exe
Size 596KB
Sample220125-vrz79abehn
SHA256 371f75df743f39477ff4b1c9b32dac5603d663effce3d1f372f1cf2023b03e8d
MD5 1ec1426c540250912a7aa6bf9899d736
SHA1 f1b04338c9c7454110a346805d6627ada32407c8
SHA512 9ce01f9ce4226566d495028cda2df02b459529c2ca173296ecde3b7c8b8eb8640fbcf9f1788c20b190b95f2a232bbcbcaeaa415f356a1ccfe4c79d1549674334
SSDEEP 6144:8B4oWMvCBs0YaUG7qJFzR4Dpw0yHz4MmrOfg54hOSRhnID3FQizX5+IgtidXX5+:8uLMviuaUsqTd45yHz4Mmr/STe5
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e5_371f75df743f39477ff4b1c9b32dac5603d663effce3d1f372f1cf2023b03e8d_2022-01-25__171329.exe

.dll 596KB

emotet_exe_e5_371f75df743f39477ff4b1c9b32dac5603d663effce3d1f372f1cf2023b03e8d_2022-01-25__171329.exe

IMPHASH 4b3c6568be69655a83355a8193247571
SHA256 371f75df743f39477ff4b1c9b32dac5603d663effce3d1f372f1cf2023b03e8d
MD5 1ec1426c540250912a7aa6bf9899d736
SHA1 f1b04338c9c7454110a346805d6627ada32407c8
SHA512 9ce01f9ce4226566d495028cda2df02b459529c2ca173296ecde3b7c8b8eb8640fbcf9f1788c20b190b95f2a232bbcbcaeaa415f356a1ccfe4c79d1549674334
SSDEEP 6144:8B4oWMvCBs0YaUG7qJFzR4Dpw0yHz4MmrOfg54hOSRhnID3FQizX5+IgtidXX5+:8uLMviuaUsqTd45yHz4Mmr/STe5
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

93760

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemTimeAsFileTime GetTimeFormatA GetDateFormatA GetSystemInfo GetCommandLineA ExitProcess RtlUnwind HeapReAlloc TerminateProcess SetStdHandle GetFileType HeapSize GetTimeZoneInformation LCMapStringA LCMapStringW HeapDestroy IsBadWritePtr GetStringTypeA GetStringTypeW SetHandleCount GetStdHandle GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW UnhandledExceptionFilter QueryPerformanceCounter GetCurrentProcessId SetUnhandledExceptionFilter IsBadCodePtr SetEnvironmentVariableA GetTickCount GetFileTime GetFileAttributesA FileTimeToLocalFileTime WritePrivateProfileStringA GetOEMCP GetCPInfo TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc FileTimeToSystemTime GlobalFlags DeleteCriticalSection InitializeCriticalSection RaiseException CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile CloseHandle GetCurrentThread lstrcmpA GetModuleFileNameA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA MulDiv GlobalAlloc FormatMessageA LocalFree GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcatA lstrcmpW lstrcpynA GetModuleHandleA GlobalLock GlobalUnlock GlobalFree FreeResource GetVersion CompareStringA lstrcmpiA CompareStringW GetLastError MultiByteToWideChar lstrlenA InterlockedDecrement InterlockedIncrement HeapFree GetProcessHeap HeapAlloc GetNativeSystemInfo FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr VirtualProtect SetLastError VirtualAlloc VirtualFree VirtualQuery Sleep FindResourceA LoadResource LockResource SizeofResource WideCharToMultiByte GetVersionExA GetThreadLocale GetLocaleInfoA GetACP HeapCreate InterlockedExchange

user32

PostThreadMessageA MessageBeep GetNextDlgGroupItem InvalidateRgn InvalidateRect CopyAcceleratorTableA SetRect IsRectEmpty CharNextA ReleaseCapture SetCapture LoadCursorA GetSysColorBrush EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA DestroyMenu SetCursor GetMessageA TranslateMessage GetCursorPos ValidateRect ReleaseDC GetDC SetWindowContextHelpId PostQuitMessage ShowWindow MoveWindow SetWindowTextA IsDialogMessageA wsprintfA SetMenuItemBitmaps ModifyMenuA GetMenuState EnableMenuItem RegisterClipboardFormatA GetMenuCheckMarkDimensions LoadBitmapA RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA SendDlgItemMessageA GetFocus SetFocus IsChild GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup DispatchMessageA GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA KillTimer SetTimer EnableWindow SendMessageA LoadIconA GetSystemMenu AppendMenuA GetClientRect IsIconic GetSystemMetrics DrawIcon MapDialogRect MapWindowPoints MessageBoxA GetKeyState SetForegroundWindow IsWindowVisible UpdateWindow GetMenu PostMessageA GetSubMenu GetMenuItemID GetMenuItemCount GetSysColor AdjustWindowRectEx EqualRect GetClassInfoA CheckMenuItem CharUpperA EndDialog GetNextDlgTabItem GetParent IsWindowEnabled GetDlgItem GetWindowLongA IsWindow DestroyWindow CreateDialogIndirectParamA SetActiveWindow GetActiveWindow GetDesktopWindow GetWindow PtInRect CopyRect GetWindowRect GetWindowPlacement SystemParametersInfoA IntersectRect OffsetRect SetWindowPos SetWindowLongA CallWindowProcA DefWindowProcA GetDlgCtrlID UnregisterClassA RegisterClassA

gdi32

GetBkColor GetTextColor GetRgnBox GetStockObject DeleteDC ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape TextOutA GetMapMode PtVisible GetWindowExtEx GetViewportExtEx DeleteObject SetMapMode RestoreDC SaveDC ExtTextOutA CreateRectRgnIndirect GetDeviceCaps CreateBitmap GetObjectA SetBkColor SetTextColor GetClipBox RectVisible

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegOpenKeyA RegQueryValueExA RegOpenKeyExA RegDeleteKeyA RegEnumKeyA RegQueryValueA RegCreateKeyExA RegSetValueExA RegCloseKey

comctl32

ord17 ImageList_Destroy

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CoGetClassObject CoTaskMemAlloc StgOpenStorageOnILockBytes CoTaskMemFree CLSIDFromProgID CLSIDFromString OleRun CoCreateInstance CoUninitialize CoInitialize StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal OleUninitialize CoFreeUnusedLibraries OleInitialize CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject

oleaut32

SysStringByteLen SysStringLen SysFreeString VariantInit VariantCopy VariantClear VariantChangeType SysAllocStringLen SafeArrayDestroy SystemTimeToVariantTime SysAllocString OleCreateFontIndirect GetErrorInfo SysAllocStringByteLen