emotet_exe_e4_7f02b1629c8bbdf9f32bc5da4db65ddc4eff010e8062a752f1b6794de980e2c8_2022-01-28__050649[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e4_7f02b1629c8bbdf9f32bc5da4db65ddc4eff010e8062a752f1b6794de980e2c8_2022-01-28__050649.exe
Size 629KB
Sample220128-fr2zhsgde5
SHA256 7f02b1629c8bbdf9f32bc5da4db65ddc4eff010e8062a752f1b6794de980e2c8
MD5 0936e8468088e6f154c5db6eb8b857d6
SHA1 18ccb636270d8627b15c989b0def03cc4eb06032
SHA512 dda78ad2c87b144f7de07d5f633d986c0b0e4073dff8dd96534fcb6901f13275c73eadc0c75f9d8091cdf7b06be35e351a33180394a67607e8d3e119dbd21dbe
SSDEEP 12288:BKx9m9TwSW/eFj5PWWWWpUUUUUUUUUUUUUUUD69JiEqHtMagzdEPon:BUmhwSWW70LtMagf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_7f02b1629c8bbdf9f32bc5da4db65ddc4eff010e8062a752f1b6794de980e2c8_2022-01-28__050649.exe

.dll 629KB

emotet_exe_e4_7f02b1629c8bbdf9f32bc5da4db65ddc4eff010e8062a752f1b6794de980e2c8_2022-01-28__050649.exe

IMPHASH 81bbe15a668dc4ae3d5f7e44db90ba82
SHA256 7f02b1629c8bbdf9f32bc5da4db65ddc4eff010e8062a752f1b6794de980e2c8
MD5 0936e8468088e6f154c5db6eb8b857d6
SHA1 18ccb636270d8627b15c989b0def03cc4eb06032
SHA512 dda78ad2c87b144f7de07d5f633d986c0b0e4073dff8dd96534fcb6901f13275c73eadc0c75f9d8091cdf7b06be35e351a33180394a67607e8d3e119dbd21dbe
SSDEEP 12288:BKx9m9TwSW/eFj5PWWWWpUUUUUUUUUUUUUUUD69JiEqHtMagzdEPon:BUmhwSWW70LtMagf
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

126151

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineA RtlUnwind Sleep ExitProcess RaiseException HeapReAlloc GetSystemInfo HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetHandleCount GetStdHandle GetFileType GetStartupInfoA HeapCreate HeapDestroy GetACP IsValidCodePage FreeEnvironmentStringsA GetEnvironmentStrings GetTickCount GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW GetTimeZoneInformation SetStdHandle GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA GetOEMCP GetCPInfo GetModuleHandleW GetFileTime GetFileSizeEx GetFileAttributesA FileTimeToLocalFileTime FileTimeToSystemTime InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags InterlockedDecrement GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA FormatMessageA LocalFree MulDiv GetCurrentProcessId GlobalAddAtomA CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle CloseHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile MultiByteToWideChar GetThreadLocale GlobalUnlock lstrlenA WritePrivateProfileStringA FreeResource GlobalFree GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetModuleFileNameA GetLocaleInfoA CompareStringA InterlockedExchange GlobalLock lstrcmpA GlobalAlloc GetModuleHandleA FindResourceA LockResource WideCharToMultiByte SizeofResource LoadResource FindResourceW HeapFree GetProcessHeap HeapAlloc GetNativeSystemInfo FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr VirtualProtect SetLastError VirtualAlloc VirtualFree VirtualQuery FreeEnvironmentStringsW GetLastError

user32

PostThreadMessageA GetSysColorBrush MessageBeep GetNextDlgGroupItem InvalidateRgn InvalidateRect SetRect IsRectEmpty CopyAcceleratorTableA CharNextA ReleaseCapture LoadCursorA SetCapture EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA DestroyMenu MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA SetFocus GetWindowTextLengthA RegisterClipboardFormatA GetForegroundWindow GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints SetMenu SetForegroundWindow UpdateWindow CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx EqualRect CopyRect PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA GetMenu SetWindowLongA OffsetRect EnableWindow SendDlgItemMessageA LoadIconA ShowWindow IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect GetMenuItemID GetMenuItemCount GetSubMenu GetWindowThreadProcessId GetLastActivePopup MessageBoxA SetCursor SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetWindowTextA GetSystemMenu AppendMenuA SendMessageA IsIconic GetSystemMetrics GetClientRect DrawIcon PostMessageA PostQuitMessage SetWindowPos MapDialogRect GetParent SetWindowContextHelpId GetWindow EndDialog GetNextDlgTabItem IsWindowEnabled GetDlgItem GetWindowLongA IsWindow DestroyWindow CreateDialogIndirectParamA SetActiveWindow GetActiveWindow GetDesktopWindow CharUpperA CheckMenuItem EnableMenuItem GetMenuState ModifyMenuA GetFocus LoadBitmapA GetMenuCheckMarkDimensions SetMenuItemBitmaps ValidateRect GetCursorPos PeekMessageA GetKeyState IsWindowVisible

gdi32

GetStockObject GetBkColor CreateRectRgnIndirect GetRgnBox GetMapMode ExtSelectClipRgn DeleteDC ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape TextOutA RectVisible PtVisible GetTextColor CreateBitmap GetWindowExtEx GetViewportExtEx DeleteObject SetMapMode RestoreDC SaveDC ExtTextOutA GetObjectA SetBkColor SetTextColor GetClipBox GetDeviceCaps

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegSetValueExA RegQueryValueA RegEnumKeyA RegOpenKeyA RegDeleteKeyA CryptAcquireContextA RegCreateKeyExA RegOpenKeyExA RegQueryValueExA RegCloseKey CryptDecrypt CryptEncrypt CryptGenKey CryptImportKey

comctl32

InitCommonControlsEx

shlwapi

PathIsUNCA PathFindFileNameA PathFindExtensionA PathStripToRootA

oledlg

ord8

ole32

OleIsCurrentClipboard CoRevokeClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes OleFlushClipboard CoGetClassObject CoTaskMemAlloc CoTaskMemFree CLSIDFromString CLSIDFromProgID CoRegisterMessageFilter StgOpenStorageOnILockBytes

oleaut32

SysFreeString SysAllocStringLen SysStringLen SysAllocStringByteLen VariantClear VariantChangeType VariantInit OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy