emotet_exe_e4_aa4b11d55e98840299c2689e1ed399bc4e821ddd0d5d92a5245593cd5bd0c0d0_2022-01-26__000334[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e4_aa4b11d55e98840299c2689e1ed399bc4e821ddd0d5d92a5245593cd5bd0c0d0_2022-01-26__000334.exe
Size 660KB
Sample220126-acmcmaadb3
SHA256 aa4b11d55e98840299c2689e1ed399bc4e821ddd0d5d92a5245593cd5bd0c0d0
MD5 ff893170a0edf7217b55e120f78c8b99
SHA1 0e2637d8f4a0c1519390ee0f04a31628fcf9b314
SHA512 7262e0650ea4aae8d7a25ce883fb43fde04177254aea6959f183736af767fb42ed0a2d0f849590ced6ba8c7dd583056d8282c72821409911566bc465f5821445
SSDEEP 12288:tGv8HbMqGJOMFfp76mfz9hzJ8Yd4lANACHKm2tkJV8u:o87vGJzomxhwAbKZ+8
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_aa4b11d55e98840299c2689e1ed399bc4e821ddd0d5d92a5245593cd5bd0c0d0_2022-01-26__000334.exe

.dll 660KB

emotet_exe_e4_aa4b11d55e98840299c2689e1ed399bc4e821ddd0d5d92a5245593cd5bd0c0d0_2022-01-26__000334.exe

IMPHASH 5292b0afb12939cb3a86034c8a283858
SHA256 aa4b11d55e98840299c2689e1ed399bc4e821ddd0d5d92a5245593cd5bd0c0d0
MD5 ff893170a0edf7217b55e120f78c8b99
SHA1 0e2637d8f4a0c1519390ee0f04a31628fcf9b314
SHA512 7262e0650ea4aae8d7a25ce883fb43fde04177254aea6959f183736af767fb42ed0a2d0f849590ced6ba8c7dd583056d8282c72821409911566bc465f5821445
SSDEEP 12288:tGv8HbMqGJOMFfp76mfz9hzJ8Yd4lANACHKm2tkJV8u:o87vGJzomxhwAbKZ+8
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

111749

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW UnhandledExceptionFilter QueryPerformanceCounter GetCurrentProcessId SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetFileType GetTimeZoneInformation SetStdHandle GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage IsBadCodePtr GetLocaleInfoW SetEnvironmentVariableA GetStdHandle SetHandleCount IsBadWritePtr HeapCreate HeapDestroy HeapSize HeapReAlloc TerminateProcess RtlUnwind ExitProcess GetCommandLineA GetSystemInfo GetSystemTimeAsFileTime GetTickCount SystemTimeToFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime FileTimeToSystemTime GetOEMCP GetCPInfo GetShortPathNameA CreateFileA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc DeleteCriticalSection InitializeCriticalSection RaiseException GlobalFlags InterlockedDecrement InterlockedIncrement GetCurrentDirectoryA FormatMessageA LocalFree MulDiv GetDiskFreeSpaceA GetFullPathNameA GetTempFileNameA GetFileTime SetFileTime GetFileAttributesA GlobalGetAtomNameA GlobalFindAtomA lstrcatA lstrcmpW CloseHandle lstrcpynA GlobalAddAtomA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA FindResourceA LockResource FreeResource GlobalFree GlobalUnlock GetCurrentThread GetCurrentThreadId GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA GetModuleFileNameA GetModuleHandleA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA GetVersion GetVersionExA CompareStringA GetThreadLocale lstrcmpiA GetLastError InterlockedExchange GetStringTypeExA MultiByteToWideChar GetACP CompareStringW WideCharToMultiByte GetLocaleInfoA lstrlenA SizeofResource LoadResource FindResourceW HeapFree GetProcessHeap HeapAlloc GetNativeSystemInfo FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr VirtualProtect SetLastError VirtualAlloc VirtualFree GetStringTypeW VirtualQuery

user32

LoadMenuA DestroyMenu UnpackDDElParam ReuseDDElParam ReleaseCapture LoadAcceleratorsA InsertMenuItemA CreatePopupMenu SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorA RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA IsChild GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos LoadIconA MapWindowPoints ScrollWindow TrackPopupMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar GetClientRect GetMenu GetSubMenu GetMenuItemID GetMenuItemCount GetSysColor AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetScrollInfo SetScrollInfo GetClassInfoA RegisterClassA UnregisterClassA DefWindowProcA CallWindowProcA OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement CopyRect PtInRect MessageBoxA GetLastActivePopup ShowOwnedPopups SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA SetRect GetKeyState PeekMessageA GetCursorPos ValidateRect SetMenuItemBitmaps ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA GetDesktopWindow GetActiveWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow IsWindow GetNextDlgTabItem EndDialog GetWindowTextLengthA GetWindowTextA GetFocus SetFocus IsWindowEnabled ShowWindow MoveWindow SetWindowLongA GetDlgCtrlID SetWindowTextA GetWindowLongA IsDialogMessageA SetDlgItemTextA RegisterClipboardFormatA WindowFromPoint RemoveMenu GetTabbedTextExtentA PostThreadMessageA CreateMenu SetParent SetWindowRgn DrawIcon FindWindowA GetMenuItemInfoA InflateRect SendDlgItemMessageA SendMessageA wsprintfA GetWindow SetWindowContextHelpId GetParent MapDialogRect SetWindowPos GetDlgItem PostMessageA DestroyCursor LoadCursorA ReleaseDC PostQuitMessage CharUpperA SetTimer KillTimer InvalidateRect GetWindowRect WindowFromDC EnableWindow UpdateWindow LockWindowUpdate GetDCEx IsWindowVisible GetSysColorBrush DestroyIcon MessageBeep GetNextDlgGroupItem SetCapture InvalidateRgn CopyAcceleratorTableA IsRectEmpty CharNextA DeleteMenu IsZoomed GetMenuStringA AppendMenuA InsertMenuA GetDC EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA SetCursor FillRect

gdi32

EndDoc DeleteDC CreateDCA GetViewportOrgEx PatBlt GetStockObject SaveDC RestoreDC SetBkMode SetPolyFillMode SetROP2 SetStretchBltMode SetMapMode ExcludeClipRect IntersectClipRect LineTo MoveToEx SetTextAlign DeleteObject SelectClipRgn CreateRectRgn GetViewportExtEx GetWindowExtEx PtVisible RectVisible TextOutA ExtTextOutA Escape SelectObject SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx AbortDoc ScaleWindowExtEx GetCurrentPositionEx ExtSelectClipRgn CreatePatternBrush CreateRectRgnIndirect GetTextMetricsA GetTextExtentPoint32A StretchDIBits GetCharWidthA CreateFontA GetTextColor GetRgnBox CreateFontIndirectA SetRectRgn CombineRgn GetMapMode CreateEllipticRgn LPtoDP GetNearestColor GetBkMode GetPolyFillMode GetROP2 GetStretchBltMode GetTextAlign GetTextFaceA GetWindowOrgEx SetAbortProc EndPage StartPage StartDocA DPtoLP GetDeviceCaps GetObjectA SetBkColor SetTextColor GetClipBox CreateBitmap Arc PolyBezier Polyline Polygon CreatePen RoundRect SetPixelV GetPixel Ellipse BitBlt GetBkColor CreateSolidBrush Rectangle SetWindowExtEx CreateCompatibleDC CreateCompatibleBitmap

comdlg32

GetOpenFileNameA GetSaveFileNameA PrintDlgA CommDlgExtendedError GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter GetJobA

advapi32

RegSetValueA RegQueryValueExA RegOpenKeyExA RegCreateKeyExA RegSetValueExA RegDeleteValueA RegDeleteKeyA RegEnumKeyA RegOpenKeyA RegQueryValueA SetFileSecurityA RegCreateKeyA RegCloseKey GetFileSecurityA

shell32

DragFinish ExtractIconA SHGetFileInfoA DragQueryFileA

comctl32

ord17 ImageList_Draw ImageList_GetImageInfo ImageList_Destroy

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CoRevokeClassObject OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter OleDestroyMenuDescriptor OleCreateMenuDescriptor IsAccelerator OleTranslateAccelerator CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoTaskMemAlloc CoTaskMemFree CLSIDFromString CLSIDFromProgID OleInitialize CoFreeUnusedLibraries OleUninitialize

oleaut32

SysFreeString VariantClear VariantChangeType VariantInit SysStringLen SysAllocStringByteLen OleCreateFontIndirect SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysAllocStringLen