emotet_exe_e5_f4a57c78f6428710e01a577008add1a3e82dec749dbd054e9c375b5b75c82cdf_2022-01-31__143401[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e5_f4a57c78f6428710e01a577008add1a3e82dec749dbd054e9c375b5b75c82cdf_2022-01-31__143401.exe
Size 542KB
Sample220131-rx3nsahchq
SHA256 f4a57c78f6428710e01a577008add1a3e82dec749dbd054e9c375b5b75c82cdf
MD5 8528e4e95a0205cfe0342dbc1da8d8ba
SHA1 dc448eb40f49f15ecffaf562a46bef195581646f
SHA512 29c541615cce72bf02d32e2eda2b602665f690d6eb2b26fa190e652ffee04f1b97226be1d674d823eea111b0e1cf787e4167c32445673e38603f18b2e56fd32e
SSDEEP 12288:0H6rKJ70bYALH7H6BRls2x2mnbNY/CCKxW:0Ua70bY4+TuW2Qy/CJx
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e5_f4a57c78f6428710e01a577008add1a3e82dec749dbd054e9c375b5b75c82cdf_2022-01-31__143401.exe

.dll 542KB

emotet_exe_e5_f4a57c78f6428710e01a577008add1a3e82dec749dbd054e9c375b5b75c82cdf_2022-01-31__143401.exe

IMPHASH 99e2d4aa64841e65d34b1e122d340295
SHA256 f4a57c78f6428710e01a577008add1a3e82dec749dbd054e9c375b5b75c82cdf
MD5 8528e4e95a0205cfe0342dbc1da8d8ba
SHA1 dc448eb40f49f15ecffaf562a46bef195581646f
SHA512 29c541615cce72bf02d32e2eda2b602665f690d6eb2b26fa190e652ffee04f1b97226be1d674d823eea111b0e1cf787e4167c32445673e38603f18b2e56fd32e
SSDEEP 12288:0H6rKJ70bYALH7H6BRls2x2mnbNY/CCKxW:0Ua70bY4+TuW2Qy/CJx
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

206175

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesA GetFileSizeEx GetFileTime GetTickCount RtlUnwind GetCommandLineA Sleep ExitThread CreateThread RaiseException GetSystemInfo HeapReAlloc HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate HeapDestroy GetStdHandle GetACP IsValidCodePage SetHandleCount GetFileType FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW GetTimeZoneInformation LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA FileTimeToLocalFileTime FileTimeToSystemTime GetModuleHandleW GetOEMCP GetCPInfo CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GetThreadLocale InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags InterlockedDecrement FormatMessageA LocalFree MulDiv GlobalGetAtomNameA GlobalFindAtomA MultiByteToWideChar lstrcmpW GetVersionExA lstrlenA WritePrivateProfileStringA GlobalUnlock GlobalFree FreeResource GetCurrentProcessId GlobalAddAtomA CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetModuleFileNameA GetLocaleInfoA CompareStringA InterlockedExchange GlobalLock lstrcmpA GlobalAlloc GetModuleHandleA WideCharToMultiByte LockResource FindResourceA GetLastError LoadLibraryW ExitProcess LoadResource SizeofResource HeapFree GetNativeSystemInfo GetProcessHeap HeapAlloc FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr VirtualProtect SetLastError VirtualAlloc VirtualFree GetStartupInfoA VirtualQuery

user32

RegisterClipboardFormatA PostThreadMessageA CharNextA CharUpperA GetSysColorBrush ReleaseCapture LoadCursorA SetCapture DestroyMenu EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA ReleaseDC GetDC MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA SetPropA RemovePropA SetFocus GetWindowTextA GetForegroundWindow GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints SetMenu UpdateWindow GetSubMenu GetMenuItemID GetMenuItemCount CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx EqualRect CopyRect PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA GetMenu OffsetRect ShowWindow SetWindowLongA GetWindowLongA IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindow SetWindowContextHelpId MapDialogRect SetWindowPos GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow IsWindow MessageBeep GetDlgItem GetNextDlgTabItem GetNextDlgGroupItem InvalidateRgn InvalidateRect SetRect IsRectEmpty GetPropA CopyAcceleratorTableA GetSystemMetrics DrawIcon AppendMenuA SendMessageA GetSystemMenu IsIconic GetClientRect SetForegroundWindow EnableWindow LoadIconA PostQuitMessage PostMessageA CheckMenuItem EnableMenuItem GetMenuState ModifyMenuA GetParent GetFocus LoadBitmapA GetMenuCheckMarkDimensions SetMenuItemBitmaps ValidateRect GetCursorPos PeekMessageA GetKeyState IsWindowVisible GetActiveWindow DispatchMessageA TranslateMessage GetMessageA CallNextHookEx SetWindowsHookExA SetCursor MessageBoxA IsWindowEnabled GetLastActivePopup GetWindowThreadProcessId EndDialog

gdi32

GetStockObject GetDeviceCaps DeleteDC GetBkColor GetTextColor GetRgnBox GetMapMode ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject CreateBitmap ExtTextOutA TextOutA RectVisible PtVisible GetWindowExtEx GetViewportExtEx DeleteObject SetMapMode RestoreDC SaveDC CreateRectRgnIndirect GetObjectA SetBkColor SetTextColor GetClipBox Escape

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegQueryValueA RegSetValueExA RegCreateKeyExA RegCloseKey RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameA PathStripToRootA PathIsUNCA PathFindExtensionA

wsock32

send inet_addr recv accept listen bind htons WSACleanup WSAGetLastError socket WSAStartup closesocket

oledlg

ord8

ole32

CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoTaskMemAlloc OleInitialize CoTaskMemFree CLSIDFromString CLSIDFromProgID CoFreeUnusedLibraries OleUninitialize CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject

oleaut32

SysAllocStringLen VariantClear VariantChangeType VariantInit SysStringLen SysAllocStringByteLen OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysFreeString