emotet_exe_e4_df7a191b17b8554f0362a38ae92ff8859987da34d5344f223613a4dc4f2c4ab5_2022-02-01__214225[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e4_df7a191b17b8554f0362a38ae92ff8859987da34d5344f223613a4dc4f2c4ab5_2022-02-01__214225.exe
Size 684KB
Sample220201-1kxfnsccd8
SHA256 df7a191b17b8554f0362a38ae92ff8859987da34d5344f223613a4dc4f2c4ab5
MD5 47a7fc26b3a8bb0af72b718c908cb55f
SHA1 c37acca5dd39a551345dc6c7cb59f6d1d3a4fae1
SHA512 cac28a4d3616200ca15924eeb53d14e5dd379de3901a08ba5f6d126014dc1bdaed005a4cdaf7b72efe3b248c3410831e43b665c369fce2502b089fa63f47536b
SSDEEP 6144:jpvac/hrq/4wi/fRBe06Av38/giQEjSdLZJ8iqOqnP/ypSlwDmL0TX9zZ7cuQUa:y4wwRBe01P8/giQE8zsiS9W7PQUaIF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_df7a191b17b8554f0362a38ae92ff8859987da34d5344f223613a4dc4f2c4ab5_2022-02-01__214225.exe

.dll 684KB

emotet_exe_e4_df7a191b17b8554f0362a38ae92ff8859987da34d5344f223613a4dc4f2c4ab5_2022-02-01__214225.exe

IMPHASH e814289da191314c95270b178d374c43
SHA256 df7a191b17b8554f0362a38ae92ff8859987da34d5344f223613a4dc4f2c4ab5
MD5 47a7fc26b3a8bb0af72b718c908cb55f
SHA1 c37acca5dd39a551345dc6c7cb59f6d1d3a4fae1
SHA512 cac28a4d3616200ca15924eeb53d14e5dd379de3901a08ba5f6d126014dc1bdaed005a4cdaf7b72efe3b248c3410831e43b665c369fce2502b089fa63f47536b
SSDEEP 6144:jpvac/hrq/4wi/fRBe06Av38/giQEjSdLZJ8iqOqnP/ypSlwDmL0TX9zZ7cuQUa:y4wwRBe01P8/giQE8zsiS9W7PQUaIF
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

128420

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

setupapi

SetupDiDestroyDeviceInfoList SetupDiOpenDevRegKey SetupDiGetDeviceRegistryPropertyW SetupDiEnumDeviceInfo SetupDiGetClassDevsW

kernel32

GetTickCount FileTimeToLocalFileTime GetFileAttributesW GetFileTime HeapAlloc HeapFree GetCommandLineA GetProcessHeap RtlUnwind ExitProcess ExitThread CreateThread RaiseException HeapReAlloc HeapSize VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent VirtualFree HeapDestroy GetStdHandle GetModuleFileNameA GetCPInfo GetACP GetOEMCP LCMapStringA LCMapStringW SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetTimeZoneInformation GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA FileTimeToSystemTime GetFullPathNameW GetVolumeInformationW FindFirstFileW FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer GetThreadLocale lstrlenA InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags FormatMessageW LocalFree InterlockedDecrement MulDiv GetModuleHandleA GlobalFindAtomW CompareStringW LoadLibraryA GetVersionExA GetCurrentProcessId GetLastError SetLastError GlobalAddAtomW CreateEventW SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority GlobalUnlock lstrlenW WritePrivateProfileStringW FreeResource GlobalFree GetCurrentThread GetCurrentThreadId ConvertDefaultLocale GetModuleFileNameW GetVersion EnumResourceLanguagesW lstrcmpA GetLocaleInfoW LoadLibraryW CompareStringA InterlockedExchange GlobalLock lstrcmpW GlobalAlloc FreeLibrary GlobalDeleteAtom GetModuleHandleW GetProcAddress MultiByteToWideChar ReadFile WriteFile WideCharToMultiByte SetCommState GetCommState SetCommTimeouts GetCommTimeouts CreateFileW CloseHandle FindResourceW LoadResource LockResource SizeofResource Sleep HeapCreate

user32

CharUpperW RegisterClipboardFormatW PostThreadMessageW ReleaseCapture LoadCursorW SetCapture EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringW DrawTextExW DrawTextW TabbedTextOutW DestroyMenu ShowWindow MoveWindow SetWindowTextW IsDialogMessageW RegisterWindowMessageW SendDlgItemMessageW SendDlgItemMessageA WinHelpW IsChild GetCapture GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW GetWindowTextLengthW GetWindowTextW GetForegroundWindow GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow UpdateWindow GetMenu GetSubMenu GetMenuItemID GetMenuItemCount CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW GetSysColor AdjustWindowRectEx EqualRect PtInRect GetDlgCtrlID DefWindowProcW CallWindowProcW OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect ReleaseDC GetDC CopyRect GetWindowThreadProcessId GetLastActivePopup MessageBoxW SetCursor SetWindowsHookExW CallNextHookEx GetMessageW TranslateMessage DispatchMessageW IsWindowVisible GetKeyState PeekMessageW GetCursorPos ValidateRect GetSysColorBrush MessageBeep GetNextDlgGroupItem InvalidateRgn SetMenuItemBitmaps GetMenuCheckMarkDimensions InvalidateRect SetRect IsRectEmpty CopyAcceleratorTableW SetFocus CharNextW GetFocus ModifyMenuW GetMenuState EnableMenuItem CheckMenuItem GetDesktopWindow GetActiveWindow SetActiveWindow CreateDialogIndirectParamW DestroyWindow IsWindow GetDlgItem IsWindowEnabled GetNextDlgTabItem EndDialog GetWindow SetWindowContextHelpId GetParent MapDialogRect SetWindowPos PostQuitMessage PostMessageW EnableWindow SendMessageW LoadBitmapW DrawIcon GetClientRect GetSystemMetrics IsIconic SetWindowLongW GetWindowLongW AppendMenuW GetSystemMenu LoadIconW UnregisterClassA

gdi32

ExtSelectClipRgn DeleteDC Escape GetStockObject GetDeviceCaps GetBkColor GetTextColor GetRgnBox GetMapMode TextOutW RectVisible PtVisible GetWindowExtEx ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SetTextColor GetClipBox CreateRectRgnIndirect CreateBitmap GetViewportExtEx DeleteObject SetMapMode RestoreDC SaveDC ExtTextOutW GetObjectW SetBkColor SelectObject

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW OpenPrinterW ClosePrinter

advapi32

RegDeleteKeyW RegQueryValueW RegOpenKeyW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCreateKeyExW RegOpenKeyExW RegCloseKey

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameW PathStripToRootW PathFindExtensionW PathIsUNCW

oledlg

OleUIBusyW

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoRevokeClassObject CoTaskMemAlloc CoTaskMemFree CLSIDFromString CLSIDFromProgID OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter

oleaut32

VariantCopy SysFreeString SysAllocString SafeArrayDestroy SystemTimeToVariantTime VariantTimeToSystemTime OleCreateFontIndirect SysStringLen VariantInit VariantChangeType VariantClear SysAllocStringLen