emotet_exe_e4_adb58acbfcbd814836548fac7c6d14caf0217488f9dbaea05a3e22c0705e7929_2022-01-31__163815[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e4_adb58acbfcbd814836548fac7c6d14caf0217488f9dbaea05a3e22c0705e7929_2022-01-31__163815.exe
Size 412KB
Sample220131-t5zyzaaeb6
SHA256 adb58acbfcbd814836548fac7c6d14caf0217488f9dbaea05a3e22c0705e7929
MD5 00e90c86135d2dbdbae2135fa02b30cd
SHA1 3abe0964b80be6351a50323abc945732883a1350
SHA512 c770c644684f49178d7f312b38823b5d1838a4c594f16a87f50a85512aba68ad34f37dd35a70954213b92c80fe7ed3eb06102247a4b430e07c114fcc24289175
SSDEEP 6144:xLl7XgCt3z4QktK8zm+pTf3l6Bn2ocEKya5VRCE5KjazSvs4U4FWANhqT8Argj:3bgCOvt9zmuf22ocL5qE8aOvZFQ4RA
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_adb58acbfcbd814836548fac7c6d14caf0217488f9dbaea05a3e22c0705e7929_2022-01-31__163815.exe

.dll 412KB

emotet_exe_e4_adb58acbfcbd814836548fac7c6d14caf0217488f9dbaea05a3e22c0705e7929_2022-01-31__163815.exe

IMPHASH 740550e6f2a46f2a05a2cc82f9117d3f
SHA256 adb58acbfcbd814836548fac7c6d14caf0217488f9dbaea05a3e22c0705e7929
MD5 00e90c86135d2dbdbae2135fa02b30cd
SHA1 3abe0964b80be6351a50323abc945732883a1350
SHA512 c770c644684f49178d7f312b38823b5d1838a4c594f16a87f50a85512aba68ad34f37dd35a70954213b92c80fe7ed3eb06102247a4b430e07c114fcc24289175
SSDEEP 6144:xLl7XgCt3z4QktK8zm+pTf3l6Bn2ocEKya5VRCE5KjazSvs4U4FWANhqT8Argj:3bgCOvt9zmuf22ocL5qE8aOvZFQ4RA
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

68966

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesA GetFileTime GetTickCount RtlUnwind GetSystemInfo GetCommandLineA ExitProcess HeapReAlloc HeapSize HeapDestroy HeapCreate IsBadWritePtr SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW UnhandledExceptionFilter QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeZoneInformation IsBadCodePtr SetStdHandle SetEnvironmentVariableA FileTimeToLocalFileTime GetOEMCP GetCPInfo CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile GlobalFlags WritePrivateProfileStringA FileTimeToSystemTime TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc InterlockedIncrement DeleteCriticalSection InitializeCriticalSection RaiseException GlobalGetAtomNameA GlobalFindAtomA lstrcatA lstrcmpW FreeResource GlobalAddAtomA GetCurrentThread GetCurrentThreadId GlobalDeleteAtom lstrcmpA GetModuleFileNameA GetModuleHandleA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA InterlockedDecrement GlobalFree MulDiv GlobalAlloc GlobalLock GlobalUnlock lstrcpynA LocalFree CompareStringW CompareStringA lstrlenA lstrcmpiA GetVersion MultiByteToWideChar FindResourceW GetNativeSystemInfo HeapAlloc WideCharToMultiByte FindResourceA LoadResource LockResource SizeofResource GetProcessHeap HeapFree FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr GetVersionExA GetThreadLocale GetLocaleInfoA GetACP InterlockedExchange VirtualProtect SetLastError VirtualAlloc VirtualFree VirtualQuery CreatePipe CreateProcessA PeekNamedPipe ReadFile WaitForSingleObject Sleep TerminateProcess CloseHandle GetLastError FreeEnvironmentStringsA FormatMessageA

user32

PostThreadMessageA MessageBeep GetNextDlgGroupItem InvalidateRgn InvalidateRect CopyAcceleratorTableA SetRect IsRectEmpty CharNextA ReleaseCapture SetCapture LoadCursorA GetSysColorBrush wsprintfA DestroyMenu RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA IsChild GetForegroundWindow GetTopWindow GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow UpdateWindow GetMenu AdjustWindowRectEx EqualRect GetClassInfoA RegisterClassA UnregisterClassA DefWindowProcA OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect CopyRect PtInRect GetWindow SetWindowContextHelpId MapDialogRect GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow IsWindow GetNextDlgTabItem EndDialog GetSysColor EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA SetMenuItemBitmaps SendMessageA PeekMessageA ShowWindow DrawIcon AppendMenuA EnableMenuItem GetSystemMenu IsIconic GetClientRect EnableWindow LoadIconA GetSystemMetrics ModifyMenuA CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState GetCursorPos ValidateRect MessageBoxA RegisterClipboardFormatA GetLastActivePopup SetCursor PostQuitMessage PostMessageA GetWindowTextLengthA GetWindowTextA GetFocus GetParent SetWindowPos SetFocus CallWindowProcA CharUpperA GetSubMenu GetMenuItemCount GetMenuItemID GetMenuState UnhookWindowsHookEx GetDlgItem SendDlgItemMessageA IsDialogMessageA GetWindowLongA SetWindowTextA GetDlgCtrlID SetWindowLongA MoveWindow IsWindowEnabled

gdi32

CreateRectRgnIndirect GetMapMode GetBkColor GetTextColor GetRgnBox GetStockObject DeleteDC ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx Escape CreateFontA ExtTextOutA TextOutA RectVisible PtVisible GetWindowExtEx GetViewportExtEx GetObjectA DeleteObject GetClipBox SetMapMode SetTextColor SetBkColor RestoreDC SaveDC CreateBitmap GetDeviceCaps SelectObject

comdlg32

GetOpenFileNameA GetSaveFileNameA GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegOpenKeyA RegQueryValueExA RegOpenKeyExA RegDeleteKeyA RegEnumKeyA RegQueryValueA RegCreateKeyExA RegSetValueExA RegCloseKey

comctl32

ord17

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID StgCreateDocfileOnILockBytes CoTaskMemFree CreateILockBytesOnHGlobal OleUninitialize CoFreeUnusedLibraries CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject CoTaskMemAlloc OleInitialize

oleaut32

SysFreeString SysStringLen SysAllocStringByteLen SysAllocStringLen VariantClear VariantChangeType VariantInit VariantCopy SafeArrayDestroy SystemTimeToVariantTime SysAllocString OleCreateFontIndirect