emotet_exe_e4_006f3385b62788fc782e40a68438d0ea2ab87bcc13e9ce6fcceb9d43da5d8e60_2022-01-30__000105[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e4_006f3385b62788fc782e40a68438d0ea2ab87bcc13e9ce6fcceb9d43da5d8e60_2022-01-30__000105.exe
Size 538KB
Sample220130-abgezscdc7
SHA256 006f3385b62788fc782e40a68438d0ea2ab87bcc13e9ce6fcceb9d43da5d8e60
MD5 3b884af02c4eab3fea2760d227e87f3b
SHA1 9a7aacf9bfaaaf6ba332b87ab67e12b5a312ee74
SHA512 aecb838c8d3415a90ba25ef27fc4df6cde27a068ec5727fe032a6b93cf193cfb5c873babf1a23965961d6b86bf8d143981c43394ab09fedf00e5797b5533fd5d
SSDEEP 12288:FMEB4sjSekFwPNWzomLEX/9XzA+UeV84+iw:FMuXNkFwPNYEX/xWeV84
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_006f3385b62788fc782e40a68438d0ea2ab87bcc13e9ce6fcceb9d43da5d8e60_2022-01-30__000105.exe

.dll 538KB

emotet_exe_e4_006f3385b62788fc782e40a68438d0ea2ab87bcc13e9ce6fcceb9d43da5d8e60_2022-01-30__000105.exe

IMPHASH 7247c2c21974aac9c8163fb2b0a2c7b2
SHA256 006f3385b62788fc782e40a68438d0ea2ab87bcc13e9ce6fcceb9d43da5d8e60
MD5 3b884af02c4eab3fea2760d227e87f3b
SHA1 9a7aacf9bfaaaf6ba332b87ab67e12b5a312ee74
SHA512 aecb838c8d3415a90ba25ef27fc4df6cde27a068ec5727fe032a6b93cf193cfb5c873babf1a23965961d6b86bf8d143981c43394ab09fedf00e5797b5533fd5d
SSDEEP 12288:FMEB4sjSekFwPNWzomLEX/9XzA+UeV84+iw:FMuXNkFwPNYEX/xWeV84
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

213718

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesA GetFileSizeEx GetFileTime GetTickCount RtlUnwind GetCommandLineA Sleep ExitThread CreateThread RaiseException GetSystemInfo HeapReAlloc HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate HeapDestroy GetStdHandle SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetACP IsValidCodePage GetStringTypeA GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA FileTimeToLocalFileTime FileTimeToSystemTime GetModuleHandleW GetOEMCP GetCPInfo CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GetThreadLocale InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags InterlockedDecrement FormatMessageA LocalFree MulDiv GlobalGetAtomNameA GlobalFindAtomA MultiByteToWideChar lstrcmpW GetVersionExA lstrlenA WritePrivateProfileStringA GlobalUnlock GlobalFree FreeResource GetCurrentProcessId GlobalAddAtomA CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetModuleFileNameA GetLocaleInfoA CompareStringA InterlockedExchange GlobalLock lstrcmpA GlobalAlloc GetModuleHandleA WideCharToMultiByte LockResource FindResourceA GetLastError LoadLibraryW ExitProcess LoadResource SizeofResource HeapFree GetNativeSystemInfo GetProcessHeap HeapAlloc FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr VirtualProtect SetLastError VirtualAlloc VirtualFree GetEnvironmentStrings VirtualQuery

user32

RegisterClipboardFormatA PostThreadMessageA CharNextA CharUpperA GetSysColorBrush ReleaseCapture LoadCursorA SetCapture DestroyMenu EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA SetFocus GetWindowTextLengthA GetForegroundWindow GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints SetMenu SetForegroundWindow UpdateWindow GetSubMenu GetMenuItemID GetMenuItemCount CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx EqualRect PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA GetMenu OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect ShowWindow SetWindowLongA GetWindowLongA ReleaseDC GetDC CopyRect GetWindow SetWindowContextHelpId MapDialogRect SetWindowPos GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow MessageBeep IsWindow GetDlgItem GetNextDlgGroupItem InvalidateRgn InvalidateRect SetRect IsRectEmpty GetWindowTextA CopyAcceleratorTableA GetSystemMetrics DrawIcon AppendMenuA SendMessageA GetSystemMenu IsIconic GetClientRect EnableWindow LoadIconA PostQuitMessage PostMessageA CheckMenuItem EnableMenuItem GetMenuState ModifyMenuA GetParent GetFocus LoadBitmapA GetMenuCheckMarkDimensions SetMenuItemBitmaps ValidateRect GetCursorPos PeekMessageA GetKeyState IsWindowVisible GetActiveWindow DispatchMessageA TranslateMessage GetMessageA CallNextHookEx SetWindowsHookExA SetCursor MessageBoxA IsWindowEnabled GetLastActivePopup GetWindowThreadProcessId EndDialog GetNextDlgTabItem

gdi32

GetStockObject GetDeviceCaps DeleteDC GetBkColor GetTextColor GetRgnBox GetMapMode ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject CreateBitmap ExtTextOutA TextOutA RectVisible PtVisible GetWindowExtEx GetViewportExtEx DeleteObject SetMapMode RestoreDC SaveDC GetObjectA SetBkColor SetTextColor GetClipBox CreateRectRgnIndirect Escape

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegQueryValueA RegSetValueExA RegCreateKeyExA RegCloseKey RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameA PathStripToRootA PathIsUNCA PathFindExtensionA

wsock32

recv connect WSACleanup socket WSAStartup htons ioctlsocket closesocket send

oledlg

ord8

ole32

CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoTaskMemAlloc CoTaskMemFree CLSIDFromString CLSIDFromProgID CoRevokeClassObject OleUninitialize CoFreeUnusedLibraries CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard OleInitialize

oleaut32

SysAllocStringLen VariantClear VariantChangeType VariantInit SysStringLen SysAllocStringByteLen OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysFreeString