emotet_exe_e5_d11ed53346c8462194792ad014e8f980cf572133bee6b1962738ddc24dd2dde8_2022-01-31__143404[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e5_d11ed53346c8462194792ad014e8f980cf572133bee6b1962738ddc24dd2dde8_2022-01-31__143404.exe
Size 542KB
Sample220131-rx7mqshdal
SHA256 d11ed53346c8462194792ad014e8f980cf572133bee6b1962738ddc24dd2dde8
MD5 0c9de10c6618fc8a68cdad276654e958
SHA1 1189df0ae53e672ef9a2d630e0efd28013ac165c
SHA512 a7ff70b22e241e137829770a25155d858f11cd1c1c159f4200aeac8aca376bdad14088b8242b8c134d52325a962f0a76cd79df2784a806a6deb5b396439a5d84
SSDEEP 12288:0H6rKJ70bYALH7H6BRls2x2mnbNY/CCKxW:0Ua70bY4+TuW2Qy/CJx
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e5_d11ed53346c8462194792ad014e8f980cf572133bee6b1962738ddc24dd2dde8_2022-01-31__143404.exe

.dll 542KB

emotet_exe_e5_d11ed53346c8462194792ad014e8f980cf572133bee6b1962738ddc24dd2dde8_2022-01-31__143404.exe

IMPHASH 99e2d4aa64841e65d34b1e122d340295
SHA256 d11ed53346c8462194792ad014e8f980cf572133bee6b1962738ddc24dd2dde8
MD5 0c9de10c6618fc8a68cdad276654e958
SHA1 1189df0ae53e672ef9a2d630e0efd28013ac165c
SHA512 a7ff70b22e241e137829770a25155d858f11cd1c1c159f4200aeac8aca376bdad14088b8242b8c134d52325a962f0a76cd79df2784a806a6deb5b396439a5d84
SSDEEP 12288:0H6rKJ70bYALH7H6BRls2x2mnbNY/CCKxW:0Ua70bY4+TuW2Qy/CJx
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

206175

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesA GetFileSizeEx GetFileTime GetTickCount RtlUnwind GetCommandLineA Sleep ExitThread CreateThread RaiseException GetSystemInfo HeapReAlloc HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate HeapDestroy GetStdHandle GetACP IsValidCodePage SetHandleCount GetFileType FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW GetTimeZoneInformation LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA FileTimeToLocalFileTime FileTimeToSystemTime GetModuleHandleW GetOEMCP GetCPInfo CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GetThreadLocale InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags InterlockedDecrement FormatMessageA LocalFree MulDiv GlobalGetAtomNameA GlobalFindAtomA MultiByteToWideChar lstrcmpW GetVersionExA lstrlenA WritePrivateProfileStringA GlobalUnlock GlobalFree FreeResource GetCurrentProcessId GlobalAddAtomA CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetModuleFileNameA GetLocaleInfoA CompareStringA InterlockedExchange GlobalLock lstrcmpA GlobalAlloc GetModuleHandleA WideCharToMultiByte LockResource FindResourceA GetLastError LoadLibraryW ExitProcess LoadResource SizeofResource HeapFree GetNativeSystemInfo GetProcessHeap HeapAlloc FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr VirtualProtect SetLastError VirtualAlloc VirtualFree GetStartupInfoA VirtualQuery

user32

RegisterClipboardFormatA PostThreadMessageA CharNextA CharUpperA GetSysColorBrush ReleaseCapture LoadCursorA SetCapture DestroyMenu EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA ReleaseDC GetDC MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA SetPropA RemovePropA SetFocus GetWindowTextA GetForegroundWindow GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints SetMenu UpdateWindow GetSubMenu GetMenuItemID GetMenuItemCount CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx EqualRect CopyRect PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA GetMenu OffsetRect ShowWindow SetWindowLongA GetWindowLongA IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindow SetWindowContextHelpId MapDialogRect SetWindowPos GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow IsWindow MessageBeep GetDlgItem GetNextDlgTabItem GetNextDlgGroupItem InvalidateRgn InvalidateRect SetRect IsRectEmpty GetPropA CopyAcceleratorTableA GetSystemMetrics DrawIcon AppendMenuA SendMessageA GetSystemMenu IsIconic GetClientRect SetForegroundWindow EnableWindow LoadIconA PostQuitMessage PostMessageA CheckMenuItem EnableMenuItem GetMenuState ModifyMenuA GetParent GetFocus LoadBitmapA GetMenuCheckMarkDimensions SetMenuItemBitmaps ValidateRect GetCursorPos PeekMessageA GetKeyState IsWindowVisible GetActiveWindow DispatchMessageA TranslateMessage GetMessageA CallNextHookEx SetWindowsHookExA SetCursor MessageBoxA IsWindowEnabled GetLastActivePopup GetWindowThreadProcessId EndDialog

gdi32

GetStockObject GetDeviceCaps DeleteDC GetBkColor GetTextColor GetRgnBox GetMapMode ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject CreateBitmap ExtTextOutA TextOutA RectVisible PtVisible GetWindowExtEx GetViewportExtEx DeleteObject SetMapMode RestoreDC SaveDC CreateRectRgnIndirect GetObjectA SetBkColor SetTextColor GetClipBox Escape

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegQueryValueA RegSetValueExA RegCreateKeyExA RegCloseKey RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameA PathStripToRootA PathIsUNCA PathFindExtensionA

wsock32

send inet_addr recv accept listen bind htons WSACleanup WSAGetLastError socket WSAStartup closesocket

oledlg

ord8

ole32

CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoTaskMemAlloc OleInitialize CoTaskMemFree CLSIDFromString CLSIDFromProgID CoFreeUnusedLibraries OleUninitialize CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject

oleaut32

SysAllocStringLen VariantClear VariantChangeType VariantInit SysStringLen SysAllocStringByteLen OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysFreeString