emotet_exe_e4_421241a60ba2ce3ab61d1d30cd010c7f17afe95e492d6289bff5b26cad56a577_2022-01-31__163815[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e4_421241a60ba2ce3ab61d1d30cd010c7f17afe95e492d6289bff5b26cad56a577_2022-01-31__163815.exe
Size 412KB
Sample220131-t5zyzaaeb8
SHA256 421241a60ba2ce3ab61d1d30cd010c7f17afe95e492d6289bff5b26cad56a577
MD5 fcf94263e8fcef3eb6c396fd240c8ad6
SHA1 52c74ed21aca659239483e805cf680b882403b03
SHA512 001841746da6b18bb1615f6d5ae2da1e9212c1f69d610e089333b2a403deae8cd577ded23660d55e0b68347a2f1ad6bc09b64832b36dc36416f2261f19980861
SSDEEP 6144:xLl7XgCt3z4QktK8zm+pTf3l6wn2ocEKya5VRCE5KjazSvs4U4FWANhqT8Argj:3bgCOvt9zmufn2ocL5qE8aOvZFQ4RA
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_421241a60ba2ce3ab61d1d30cd010c7f17afe95e492d6289bff5b26cad56a577_2022-01-31__163815.exe

.dll 412KB

emotet_exe_e4_421241a60ba2ce3ab61d1d30cd010c7f17afe95e492d6289bff5b26cad56a577_2022-01-31__163815.exe

IMPHASH 740550e6f2a46f2a05a2cc82f9117d3f
SHA256 421241a60ba2ce3ab61d1d30cd010c7f17afe95e492d6289bff5b26cad56a577
MD5 fcf94263e8fcef3eb6c396fd240c8ad6
SHA1 52c74ed21aca659239483e805cf680b882403b03
SHA512 001841746da6b18bb1615f6d5ae2da1e9212c1f69d610e089333b2a403deae8cd577ded23660d55e0b68347a2f1ad6bc09b64832b36dc36416f2261f19980861
SSDEEP 6144:xLl7XgCt3z4QktK8zm+pTf3l6wn2ocEKya5VRCE5KjazSvs4U4FWANhqT8Argj:3bgCOvt9zmufn2ocL5qE8aOvZFQ4RA
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

68966

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesA GetFileTime GetTickCount RtlUnwind GetSystemInfo GetCommandLineA ExitProcess HeapReAlloc HeapSize HeapDestroy HeapCreate IsBadWritePtr SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW UnhandledExceptionFilter QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeZoneInformation IsBadCodePtr SetStdHandle SetEnvironmentVariableA FileTimeToLocalFileTime GetOEMCP GetCPInfo CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile GlobalFlags WritePrivateProfileStringA FileTimeToSystemTime TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc InterlockedIncrement DeleteCriticalSection InitializeCriticalSection RaiseException GlobalGetAtomNameA GlobalFindAtomA lstrcatA lstrcmpW FreeResource GlobalAddAtomA GetCurrentThread GetCurrentThreadId GlobalDeleteAtom lstrcmpA GetModuleFileNameA GetModuleHandleA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA InterlockedDecrement GlobalFree MulDiv GlobalAlloc GlobalLock GlobalUnlock lstrcpynA LocalFree CompareStringW CompareStringA lstrlenA lstrcmpiA GetVersion MultiByteToWideChar FindResourceW GetNativeSystemInfo HeapAlloc WideCharToMultiByte FindResourceA LoadResource LockResource SizeofResource GetProcessHeap HeapFree FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr GetVersionExA GetThreadLocale GetLocaleInfoA GetACP InterlockedExchange VirtualProtect SetLastError VirtualAlloc VirtualFree VirtualQuery CreatePipe CreateProcessA PeekNamedPipe ReadFile WaitForSingleObject Sleep TerminateProcess CloseHandle GetLastError FreeEnvironmentStringsA FormatMessageA

user32

PostThreadMessageA MessageBeep GetNextDlgGroupItem InvalidateRgn InvalidateRect CopyAcceleratorTableA SetRect IsRectEmpty CharNextA ReleaseCapture SetCapture LoadCursorA GetSysColorBrush wsprintfA DestroyMenu RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA IsChild GetForegroundWindow GetTopWindow GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow UpdateWindow GetMenu AdjustWindowRectEx EqualRect GetClassInfoA RegisterClassA UnregisterClassA DefWindowProcA OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect CopyRect PtInRect GetWindow SetWindowContextHelpId MapDialogRect GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow IsWindow GetNextDlgTabItem EndDialog GetSysColor EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA SetMenuItemBitmaps SendMessageA PeekMessageA ShowWindow DrawIcon AppendMenuA EnableMenuItem GetSystemMenu IsIconic GetClientRect EnableWindow LoadIconA GetSystemMetrics ModifyMenuA CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState GetCursorPos ValidateRect MessageBoxA RegisterClipboardFormatA GetLastActivePopup SetCursor PostQuitMessage PostMessageA GetWindowTextLengthA GetWindowTextA GetFocus GetParent SetWindowPos SetFocus CallWindowProcA CharUpperA GetSubMenu GetMenuItemCount GetMenuItemID GetMenuState UnhookWindowsHookEx GetDlgItem SendDlgItemMessageA IsDialogMessageA GetWindowLongA SetWindowTextA GetDlgCtrlID SetWindowLongA MoveWindow IsWindowEnabled

gdi32

CreateRectRgnIndirect GetMapMode GetBkColor GetTextColor GetRgnBox GetStockObject DeleteDC ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx Escape CreateFontA ExtTextOutA TextOutA RectVisible PtVisible GetWindowExtEx GetViewportExtEx GetObjectA DeleteObject GetClipBox SetMapMode SetTextColor SetBkColor RestoreDC SaveDC CreateBitmap GetDeviceCaps SelectObject

comdlg32

GetOpenFileNameA GetSaveFileNameA GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegOpenKeyA RegQueryValueExA RegOpenKeyExA RegDeleteKeyA RegEnumKeyA RegQueryValueA RegCreateKeyExA RegSetValueExA RegCloseKey

comctl32

ord17

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID StgCreateDocfileOnILockBytes CoTaskMemFree CreateILockBytesOnHGlobal OleUninitialize CoFreeUnusedLibraries CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject CoTaskMemAlloc OleInitialize

oleaut32

SysFreeString SysStringLen SysAllocStringByteLen SysAllocStringLen VariantClear VariantChangeType VariantInit VariantCopy SafeArrayDestroy SystemTimeToVariantTime SysAllocString OleCreateFontIndirect