emotet_exe_e4_5ef5a1d5dc91afe4d9bc137b5c13b32ef737cd6f1a0da0d35c4fff40c22db751_2022-01-28__000426[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e4_5ef5a1d5dc91afe4d9bc137b5c13b32ef737cd6f1a0da0d35c4fff40c22db751_2022-01-28__000426.exe
Size 512KB
Sample220128-adbbraddc7
SHA256 5ef5a1d5dc91afe4d9bc137b5c13b32ef737cd6f1a0da0d35c4fff40c22db751
MD5 97dd49d1b74583081aa8bf187bb7fc24
SHA1 72c2d1427f8e577bd7769e138db6db756c5ebf1e
SHA512 ee46560b5fb1de3c0fc56a108f69b5d319c9de5f34dc07e6d42a1f297ac2095a3d1496f785dad4d25e9742cb30a042ba30c8f9a4e7356d1796ec7e7fe296a055
SSDEEP 12288:CZ01lbelr11DkMuA1B2iVjF+NHQ7KLU7IEP49f:U9lr1VkzA13VjF+lkKv
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_5ef5a1d5dc91afe4d9bc137b5c13b32ef737cd6f1a0da0d35c4fff40c22db751_2022-01-28__000426.exe

.dll 512KB

emotet_exe_e4_5ef5a1d5dc91afe4d9bc137b5c13b32ef737cd6f1a0da0d35c4fff40c22db751_2022-01-28__000426.exe

IMPHASH 1e6c964d8ff7538cc0a7091b2fbe639b
SHA256 5ef5a1d5dc91afe4d9bc137b5c13b32ef737cd6f1a0da0d35c4fff40c22db751
MD5 97dd49d1b74583081aa8bf187bb7fc24
SHA1 72c2d1427f8e577bd7769e138db6db756c5ebf1e
SHA512 ee46560b5fb1de3c0fc56a108f69b5d319c9de5f34dc07e6d42a1f297ac2095a3d1496f785dad4d25e9742cb30a042ba30c8f9a4e7356d1796ec7e7fe296a055
SSDEEP 12288:CZ01lbelr11DkMuA1B2iVjF+NHQ7KLU7IEP49f:U9lr1VkzA13VjF+lkKv
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

132036

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesA GetFileTime GetCPInfo GetOEMCP GetTickCount GetSystemInfo HeapReAlloc GetCommandLineA RtlUnwind ExitProcess RaiseException HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep SetHandleCount GetStdHandle GetFileType GetStartupInfoA HeapDestroy HeapCreate FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetStringTypeA GetStringTypeW GetTimeZoneInformation SetStdHandle GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage GetLocaleInfoW WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA FileTimeToLocalFileTime FileTimeToSystemTime InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags FormatMessageA LocalFree MulDiv InterlockedDecrement GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA GetCurrentProcessId GlobalAddAtomA CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle CloseHandle GetThreadLocale GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GlobalUnlock WritePrivateProfileStringA FreeResource GlobalFree GetCurrentThread GetCurrentThreadId ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA GlobalLock lstrcmpA GlobalAlloc GlobalDeleteAtom GetModuleHandleA GetVersion CompareStringA InterlockedExchange MultiByteToWideChar CompareStringW lstrlenA FindResourceA LockResource WideCharToMultiByte SizeofResource LoadResource FindResourceW HeapFree GetProcessHeap HeapAlloc GetNativeSystemInfo FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr VirtualProtect SetLastError VirtualAlloc VirtualFree VirtualQuery GetACP GetLastError

user32

RegisterClipboardFormatA PostThreadMessageA InvalidateRect SetRect IsRectEmpty CopyAcceleratorTableA CharNextA ReleaseCapture LoadCursorA SetCapture ShowWindow MoveWindow SetWindowTextA IsDialogMessageA EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA DestroyMenu RegisterWindowMessageA SendDlgItemMessageA IsChild GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow UpdateWindow GetMenu GetSubMenu GetMenuItemID GetMenuItemCount CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx EqualRect CopyRect PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA LoadIconA GetSystemMenu AppendMenuA IsIconic SendMessageA GetSystemMetrics SetWindowLongA OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindowThreadProcessId GetLastActivePopup MessageBoxA SetCursor SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA IsWindowVisible GetKeyState UnregisterClassA PeekMessageA GetCursorPos GetSysColorBrush MessageBeep GetNextDlgGroupItem SetFocus InvalidateRgn GetClientRect DrawIcon EnableWindow CharUpperA PostMessageA PostQuitMessage SetWindowPos MapDialogRect GetParent SetWindowContextHelpId GetWindow EndDialog GetNextDlgTabItem IsWindowEnabled GetDlgItem GetWindowLongA IsWindow DestroyWindow CreateDialogIndirectParamA SetActiveWindow GetActiveWindow GetDesktopWindow CheckMenuItem EnableMenuItem GetMenuState ModifyMenuA GetFocus LoadBitmapA GetMenuCheckMarkDimensions SetMenuItemBitmaps ValidateRect WinHelpA

gdi32

GetStockObject GetDeviceCaps DeleteDC GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetMapMode ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape TextOutA RectVisible CreateBitmap GetWindowExtEx GetViewportExtEx DeleteObject SetMapMode RestoreDC SaveDC ExtTextOutA GetObjectA SetBkColor SetTextColor GetClipBox PtVisible

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegSetValueExA RegQueryValueA RegEnumKeyA RegOpenKeyA RegDeleteKeyA CryptAcquireContextA RegCreateKeyExA RegOpenKeyExA RegQueryValueExA RegCloseKey CryptDecrypt CryptEncrypt CryptGenKey CryptImportKey

comctl32

InitCommonControlsEx

shlwapi

PathStripToRootA PathIsUNCA PathFindExtensionA PathFindFileNameA

oledlg

ord8

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoRevokeClassObject CoTaskMemFree CLSIDFromString CLSIDFromProgID OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter CoTaskMemAlloc

oleaut32

SysFreeString SysAllocStringLen SysStringLen SysAllocStringByteLen VariantClear VariantChangeType VariantInit OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy