emotet_exe_e4_f8d809736f1ce29eef494529d4cd570b7e4a042bb3d4a2331b45b1497e934640_2022-02-02__000254[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e4_f8d809736f1ce29eef494529d4cd570b7e4a042bb3d4a2331b45b1497e934640_2022-02-02__000254.exe
Size 684KB
Sample220202-ab462sdcej
SHA256 f8d809736f1ce29eef494529d4cd570b7e4a042bb3d4a2331b45b1497e934640
MD5 bb87efbb6eb51c7deb5387c913119635
SHA1 a7ab2736ea0f0bece1b718a159be2a2138665447
SHA512 54f446675d0d172d17e1379a397fb647f4b0971e38e9ec4904a34fd82ad2c8ee4612e9d53f627473e19b335646f992dcf10cf151b6c8e018317d350ff6c80221
SSDEEP 6144:jpvac/hrq/4wi/fRBe06Av38/giQEjSdLZJ8iqOqnP9ypSlwDmL0TX9zZ7cuQUa:y4wwRBe01P8/giQE8zsES9W7PQUaIF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_f8d809736f1ce29eef494529d4cd570b7e4a042bb3d4a2331b45b1497e934640_2022-02-02__000254.exe

.dll 684KB

emotet_exe_e4_f8d809736f1ce29eef494529d4cd570b7e4a042bb3d4a2331b45b1497e934640_2022-02-02__000254.exe

IMPHASH e814289da191314c95270b178d374c43
SHA256 f8d809736f1ce29eef494529d4cd570b7e4a042bb3d4a2331b45b1497e934640
MD5 bb87efbb6eb51c7deb5387c913119635
SHA1 a7ab2736ea0f0bece1b718a159be2a2138665447
SHA512 54f446675d0d172d17e1379a397fb647f4b0971e38e9ec4904a34fd82ad2c8ee4612e9d53f627473e19b335646f992dcf10cf151b6c8e018317d350ff6c80221
SSDEEP 6144:jpvac/hrq/4wi/fRBe06Av38/giQEjSdLZJ8iqOqnP9ypSlwDmL0TX9zZ7cuQUa:y4wwRBe01P8/giQE8zsES9W7PQUaIF
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

128420

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

setupapi

SetupDiDestroyDeviceInfoList SetupDiOpenDevRegKey SetupDiGetDeviceRegistryPropertyW SetupDiEnumDeviceInfo SetupDiGetClassDevsW

kernel32

GetTickCount FileTimeToLocalFileTime GetFileAttributesW GetFileTime HeapAlloc HeapFree GetCommandLineA GetProcessHeap RtlUnwind ExitProcess ExitThread CreateThread RaiseException HeapReAlloc HeapSize VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent VirtualFree HeapDestroy GetStdHandle GetModuleFileNameA GetCPInfo GetACP GetOEMCP LCMapStringA LCMapStringW SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetTimeZoneInformation GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA FileTimeToSystemTime GetFullPathNameW GetVolumeInformationW FindFirstFileW FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer GetThreadLocale lstrlenA InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags FormatMessageW LocalFree InterlockedDecrement MulDiv GetModuleHandleA GlobalFindAtomW CompareStringW LoadLibraryA GetVersionExA GetCurrentProcessId GetLastError SetLastError GlobalAddAtomW CreateEventW SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority GlobalUnlock lstrlenW WritePrivateProfileStringW FreeResource GlobalFree GetCurrentThread GetCurrentThreadId ConvertDefaultLocale GetModuleFileNameW GetVersion EnumResourceLanguagesW lstrcmpA GetLocaleInfoW LoadLibraryW CompareStringA InterlockedExchange GlobalLock lstrcmpW GlobalAlloc FreeLibrary GlobalDeleteAtom GetModuleHandleW GetProcAddress MultiByteToWideChar ReadFile WriteFile WideCharToMultiByte SetCommState GetCommState SetCommTimeouts GetCommTimeouts CreateFileW CloseHandle FindResourceW LoadResource LockResource SizeofResource Sleep HeapCreate

user32

CharUpperW RegisterClipboardFormatW PostThreadMessageW ReleaseCapture LoadCursorW SetCapture EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringW DrawTextExW DrawTextW TabbedTextOutW DestroyMenu ShowWindow MoveWindow SetWindowTextW IsDialogMessageW RegisterWindowMessageW SendDlgItemMessageW SendDlgItemMessageA WinHelpW IsChild GetCapture GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW GetWindowTextLengthW GetWindowTextW GetForegroundWindow GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow UpdateWindow GetMenu GetSubMenu GetMenuItemID GetMenuItemCount CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW GetSysColor AdjustWindowRectEx EqualRect PtInRect GetDlgCtrlID DefWindowProcW CallWindowProcW OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect ReleaseDC GetDC CopyRect GetWindowThreadProcessId GetLastActivePopup MessageBoxW SetCursor SetWindowsHookExW CallNextHookEx GetMessageW TranslateMessage DispatchMessageW IsWindowVisible GetKeyState PeekMessageW GetCursorPos ValidateRect GetSysColorBrush MessageBeep GetNextDlgGroupItem InvalidateRgn SetMenuItemBitmaps GetMenuCheckMarkDimensions InvalidateRect SetRect IsRectEmpty CopyAcceleratorTableW SetFocus CharNextW GetFocus ModifyMenuW GetMenuState EnableMenuItem CheckMenuItem GetDesktopWindow GetActiveWindow SetActiveWindow CreateDialogIndirectParamW DestroyWindow IsWindow GetDlgItem IsWindowEnabled GetNextDlgTabItem EndDialog GetWindow SetWindowContextHelpId GetParent MapDialogRect SetWindowPos PostQuitMessage PostMessageW EnableWindow SendMessageW LoadBitmapW DrawIcon GetClientRect GetSystemMetrics IsIconic SetWindowLongW GetWindowLongW AppendMenuW GetSystemMenu LoadIconW UnregisterClassA

gdi32

ExtSelectClipRgn DeleteDC Escape GetStockObject GetDeviceCaps GetBkColor GetTextColor GetRgnBox GetMapMode TextOutW RectVisible PtVisible GetWindowExtEx ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SetTextColor GetClipBox CreateRectRgnIndirect CreateBitmap GetViewportExtEx DeleteObject SetMapMode RestoreDC SaveDC ExtTextOutW GetObjectW SetBkColor SelectObject

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW OpenPrinterW ClosePrinter

advapi32

RegDeleteKeyW RegQueryValueW RegOpenKeyW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCreateKeyExW RegOpenKeyExW RegCloseKey

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameW PathStripToRootW PathFindExtensionW PathIsUNCW

oledlg

OleUIBusyW

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoRevokeClassObject CoTaskMemAlloc CoTaskMemFree CLSIDFromString CLSIDFromProgID OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter

oleaut32

VariantCopy SysFreeString SysAllocString SafeArrayDestroy SystemTimeToVariantTime VariantTimeToSystemTime OleCreateFontIndirect SysStringLen VariantInit VariantChangeType VariantClear SysAllocStringLen