emotet_exe_e4_868d29ec2d3a588d882f0f2cec1153afa788f34e9c9cd2f67da912e62aa2cdc9_2022-01-26__192009[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e4_868d29ec2d3a588d882f0f2cec1153afa788f34e9c9cd2f67da912e62aa2cdc9_2022-01-26__192009.exe
Size 496KB
Sample220126-x2nnbahfg5
SHA256 868d29ec2d3a588d882f0f2cec1153afa788f34e9c9cd2f67da912e62aa2cdc9
MD5 8255a4289d671fb8a1a31541088e01ff
SHA1 8586d77f7c97b2eb1b0c7ce71f0a77a0d77aa5cf
SHA512 9b2a2b9bef4d31be8dbbac8ec037f75a6e660ea8da5ec3c7486f7c488a46bea19754490bf4adb777ec64eb1c4a54d902419d472201fd8d2b2625d4ad9b7223d7
SSDEEP 6144:1nxxxxt33333333hCCT8YyYRbLNMbMnFR3eJgNq30v8k9clB2SyI2ZJuu1OCPmw:h83YR/KMn/OJgV0uLJ1Lmuw1
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_868d29ec2d3a588d882f0f2cec1153afa788f34e9c9cd2f67da912e62aa2cdc9_2022-01-26__192009.exe

.dll 496KB

emotet_exe_e4_868d29ec2d3a588d882f0f2cec1153afa788f34e9c9cd2f67da912e62aa2cdc9_2022-01-26__192009.exe

IMPHASH 8774c2a2048003b6fbdcee97110d5bd1
SHA256 868d29ec2d3a588d882f0f2cec1153afa788f34e9c9cd2f67da912e62aa2cdc9
MD5 8255a4289d671fb8a1a31541088e01ff
SHA1 8586d77f7c97b2eb1b0c7ce71f0a77a0d77aa5cf
SHA512 9b2a2b9bef4d31be8dbbac8ec037f75a6e660ea8da5ec3c7486f7c488a46bea19754490bf4adb777ec64eb1c4a54d902419d472201fd8d2b2625d4ad9b7223d7
SSDEEP 6144:1nxxxxt33333333hCCT8YyYRbLNMbMnFR3eJgNq30v8k9clB2SyI2ZJuu1OCPmw:h83YR/KMn/OJgV0uLJ1Lmuw1
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

146141

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RtlUnwind GetSystemInfo GetSystemTimeAsFileTime GetCommandLineA ExitProcess HeapReAlloc TerminateProcess SetStdHandle GetFileType HeapSize HeapDestroy HeapCreate IsBadWritePtr GetTimeZoneInformation SetHandleCount GetStdHandle GetTickCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW UnhandledExceptionFilter QueryPerformanceCounter GetCurrentProcessId SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW IsBadCodePtr SetEnvironmentVariableA GetOEMCP GetCPInfo GlobalFlags WritePrivateProfileStringA GetFileTime GetFileAttributesA CreateFileA GetFullPathNameA GetVolumeInformationA GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile FindFirstFileA FindClose TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue GlobalHandle GlobalReAlloc InterlockedIncrement InterlockedDecrement GlobalGetAtomNameA GlobalFindAtomA lstrcatA lstrcmpW FreeResource WaitForSingleObject CloseHandle GlobalAddAtomA GetCurrentThread GetCurrentThreadId GlobalDeleteAtom lstrcmpA GetModuleFileNameA GetModuleHandleA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA LeaveCriticalSection EnterCriticalSection LocalAlloc FileTimeToLocalFileTime FileTimeToSystemTime DeleteCriticalSection InitializeCriticalSection RaiseException MulDiv GlobalLock GlobalUnlock FormatMessageA lstrcpynA LocalFree FindResourceW HeapFree GetNativeSystemInfo GetProcessHeap HeapAlloc FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr VirtualProtect SetLastError VirtualAlloc VirtualFree VirtualQuery LoadResource LockResource SizeofResource FindResourceA GlobalAlloc GlobalFree GetLastError lstrlenA lstrcmpiA WideCharToMultiByte CompareStringA CompareStringW MultiByteToWideChar GetVersion GetThreadLocale GetLocaleInfoA GetACP GetVersionExA GetStartupInfoA InterlockedExchange

user32

PostThreadMessageA MessageBeep GetNextDlgGroupItem InvalidateRgn InvalidateRect CopyAcceleratorTableA SetRect IsRectEmpty CharNextA ReleaseCapture SetCapture LoadCursorA GetSysColorBrush EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA DestroyMenu wsprintfA RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA IsChild GetForegroundWindow GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow GetMenu GetSysColor AdjustWindowRectEx GetClassInfoA RegisterClassA DefWindowProcA CallWindowProcA OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect CopyRect PtInRect GetWindow SetWindowContextHelpId MapDialogRect SetActiveWindow CreateDialogIndirectParamA DestroyWindow IsWindow GetNextDlgTabItem EndDialog SetMenuItemBitmaps ModifyMenuA EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState PeekMessageA GetCursorPos ValidateRect MessageBoxA GetLastActivePopup SetCursor PostQuitMessage PostMessageA GetWindowTextLengthA GetWindowTextA GetFocus GetParent SetWindowPos SetFocus IsWindowEnabled MoveWindow RegisterClipboardFormatA SetWindowLongA GetDlgCtrlID SetWindowTextA GetWindowLongA IsDialogMessageA SetDlgItemTextA SendDlgItemMessageA GetDlgItem UpdateWindow GetDesktopWindow UnregisterClassA GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu EnableWindow IsIconic GetSystemMetrics GetClientRect DrawIcon GetSystemMenu AppendMenuA SendMessageA ShowWindow LoadIconA RedrawWindow CharUpperA EqualRect

gdi32

GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetMapMode GetWindowExtEx GetViewportExtEx DeleteObject PtVisible GetStockObject DeleteDC ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape TextOutA GetDeviceCaps SetMapMode RestoreDC SaveDC ExtTextOutA GetObjectA SetBkColor SetTextColor GetClipBox CreateBitmap RectVisible

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter OpenPrinterA DocumentPropertiesA

advapi32

RegOpenKeyA RegQueryValueExA RegOpenKeyExA RegDeleteKeyA RegEnumKeyA RegQueryValueA RegCreateKeyExA RegSetValueExA RegCloseKey

comctl32

ord17

shlwapi

PathFindFileNameA PathStripToRootA UrlUnescapeA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CoTaskMemFree CoTaskMemAlloc CLSIDFromProgID CLSIDFromString OleInitialize CoGetClassObject StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal OleUninitialize CoFreeUnusedLibraries CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject

oleaut32

OleCreateFontIndirect SysAllocString SafeArrayDestroy VariantCopy VariantInit VariantChangeType VariantClear SysAllocStringLen SysAllocStringByteLen SysStringLen SysFreeString SystemTimeToVariantTime

wininet

InternetOpenUrlA InternetReadFile InternetWriteFile InternetSetFilePointer InternetSetStatusCallback InternetOpenA InternetGetLastResponseInfoA InternetCloseHandle HttpQueryInfoA InternetQueryDataAvailable InternetQueryOptionA InternetCanonicalizeUrlA InternetCrackUrlA InternetSetOptionExA