emotet_exe_e5_ba8599880ee53f97f6f42d82ba6e41e0d520b24cbbf2dcb3ba9700c69bb3c450_2022-01-31__143401[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e5_ba8599880ee53f97f6f42d82ba6e41e0d520b24cbbf2dcb3ba9700c69bb3c450_2022-01-31__143401.exe
Size 542KB
Sample220131-rx4k3shhh6
SHA256 ba8599880ee53f97f6f42d82ba6e41e0d520b24cbbf2dcb3ba9700c69bb3c450
MD5 ed91446d0bf93072bbadce69894bd972
SHA1 eb35c86062b0c5f520685f329d4b3d5aeaa814c9
SHA512 d76a453f1a229ae6692f2cd5c0c259cacf83ed376b3620dd0516daea5b97250dd504716811846fbb3d400bfc33df70b41069f83a03c539e141afbbd23c5e5ad2
SSDEEP 12288:0H6rKJ70bYALH7H6BRSs2x2mnbNY/CCKxW:0Ua70bY4+TLW2Qy/CJx
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e5_ba8599880ee53f97f6f42d82ba6e41e0d520b24cbbf2dcb3ba9700c69bb3c450_2022-01-31__143401.exe

.dll 542KB

emotet_exe_e5_ba8599880ee53f97f6f42d82ba6e41e0d520b24cbbf2dcb3ba9700c69bb3c450_2022-01-31__143401.exe

IMPHASH 99e2d4aa64841e65d34b1e122d340295
SHA256 ba8599880ee53f97f6f42d82ba6e41e0d520b24cbbf2dcb3ba9700c69bb3c450
MD5 ed91446d0bf93072bbadce69894bd972
SHA1 eb35c86062b0c5f520685f329d4b3d5aeaa814c9
SHA512 d76a453f1a229ae6692f2cd5c0c259cacf83ed376b3620dd0516daea5b97250dd504716811846fbb3d400bfc33df70b41069f83a03c539e141afbbd23c5e5ad2
SSDEEP 12288:0H6rKJ70bYALH7H6BRSs2x2mnbNY/CCKxW:0Ua70bY4+TLW2Qy/CJx
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

206175

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesA GetFileSizeEx GetFileTime GetTickCount RtlUnwind GetCommandLineA Sleep ExitThread CreateThread RaiseException GetSystemInfo HeapReAlloc HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate HeapDestroy GetStdHandle GetACP IsValidCodePage SetHandleCount GetFileType FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW GetTimeZoneInformation LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA FileTimeToLocalFileTime FileTimeToSystemTime GetModuleHandleW GetOEMCP GetCPInfo CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GetThreadLocale InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags InterlockedDecrement FormatMessageA LocalFree MulDiv GlobalGetAtomNameA GlobalFindAtomA MultiByteToWideChar lstrcmpW GetVersionExA lstrlenA WritePrivateProfileStringA GlobalUnlock GlobalFree FreeResource GetCurrentProcessId GlobalAddAtomA CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetModuleFileNameA GetLocaleInfoA CompareStringA InterlockedExchange GlobalLock lstrcmpA GlobalAlloc GetModuleHandleA WideCharToMultiByte LockResource FindResourceA GetLastError LoadLibraryW ExitProcess LoadResource SizeofResource HeapFree GetNativeSystemInfo GetProcessHeap HeapAlloc FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr VirtualProtect SetLastError VirtualAlloc VirtualFree GetStartupInfoA VirtualQuery

user32

RegisterClipboardFormatA PostThreadMessageA CharNextA CharUpperA GetSysColorBrush ReleaseCapture LoadCursorA SetCapture DestroyMenu EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA ReleaseDC GetDC MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA SetPropA RemovePropA SetFocus GetWindowTextA GetForegroundWindow GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints SetMenu UpdateWindow GetSubMenu GetMenuItemID GetMenuItemCount CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx EqualRect CopyRect PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA GetMenu OffsetRect ShowWindow SetWindowLongA GetWindowLongA IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindow SetWindowContextHelpId MapDialogRect SetWindowPos GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow IsWindow MessageBeep GetDlgItem GetNextDlgTabItem GetNextDlgGroupItem InvalidateRgn InvalidateRect SetRect IsRectEmpty GetPropA CopyAcceleratorTableA GetSystemMetrics DrawIcon AppendMenuA SendMessageA GetSystemMenu IsIconic GetClientRect SetForegroundWindow EnableWindow LoadIconA PostQuitMessage PostMessageA CheckMenuItem EnableMenuItem GetMenuState ModifyMenuA GetParent GetFocus LoadBitmapA GetMenuCheckMarkDimensions SetMenuItemBitmaps ValidateRect GetCursorPos PeekMessageA GetKeyState IsWindowVisible GetActiveWindow DispatchMessageA TranslateMessage GetMessageA CallNextHookEx SetWindowsHookExA SetCursor MessageBoxA IsWindowEnabled GetLastActivePopup GetWindowThreadProcessId EndDialog

gdi32

GetStockObject GetDeviceCaps DeleteDC GetBkColor GetTextColor GetRgnBox GetMapMode ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject CreateBitmap ExtTextOutA TextOutA RectVisible PtVisible GetWindowExtEx GetViewportExtEx DeleteObject SetMapMode RestoreDC SaveDC CreateRectRgnIndirect GetObjectA SetBkColor SetTextColor GetClipBox Escape

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegQueryValueA RegSetValueExA RegCreateKeyExA RegCloseKey RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameA PathStripToRootA PathIsUNCA PathFindExtensionA

wsock32

send inet_addr recv accept listen bind htons WSACleanup WSAGetLastError socket WSAStartup closesocket

oledlg

ord8

ole32

CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoTaskMemAlloc OleInitialize CoTaskMemFree CLSIDFromString CLSIDFromProgID CoFreeUnusedLibraries OleUninitialize CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject

oleaut32

SysAllocStringLen VariantClear VariantChangeType VariantInit SysStringLen SysAllocStringByteLen OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysFreeString