emotet_exe_e4_48afc2042d1498db0ea8e076dd0b121fff526e4c4096adbb19641cbe609938ef_2022-02-02__000255[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e4_48afc2042d1498db0ea8e076dd0b121fff526e4c4096adbb19641cbe609938ef_2022-02-02__000255.exe
Size 684KB
Sample220202-ab61msdcep
SHA256 48afc2042d1498db0ea8e076dd0b121fff526e4c4096adbb19641cbe609938ef
MD5 e7ee2dcb74b40d7c1d212e7513d2afcc
SHA1 dbf7c045c2d33e64dac1524916d138e075b82d48
SHA512 769724cdfc22474bfbf7743c6844d52e1ba8cdc277bf5569477407961e2f111107a07f1ff03f71e37dc69bfdc491154669fd77249024563f8ebdeee9d122cd2c
SSDEEP 6144:jpvac/hrq/4wi/fRBe06Av38/giQEjSdLZJ8iqOqnPqypSlwDmL0TX9zZ7cuQUa:y4wwRBe01P8/giQE8zstS9W7PQUaIF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_48afc2042d1498db0ea8e076dd0b121fff526e4c4096adbb19641cbe609938ef_2022-02-02__000255.exe

.dll 684KB

emotet_exe_e4_48afc2042d1498db0ea8e076dd0b121fff526e4c4096adbb19641cbe609938ef_2022-02-02__000255.exe

IMPHASH e814289da191314c95270b178d374c43
SHA256 48afc2042d1498db0ea8e076dd0b121fff526e4c4096adbb19641cbe609938ef
MD5 e7ee2dcb74b40d7c1d212e7513d2afcc
SHA1 dbf7c045c2d33e64dac1524916d138e075b82d48
SHA512 769724cdfc22474bfbf7743c6844d52e1ba8cdc277bf5569477407961e2f111107a07f1ff03f71e37dc69bfdc491154669fd77249024563f8ebdeee9d122cd2c
SSDEEP 6144:jpvac/hrq/4wi/fRBe06Av38/giQEjSdLZJ8iqOqnPqypSlwDmL0TX9zZ7cuQUa:y4wwRBe01P8/giQE8zstS9W7PQUaIF
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

128420

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

setupapi

SetupDiDestroyDeviceInfoList SetupDiOpenDevRegKey SetupDiGetDeviceRegistryPropertyW SetupDiEnumDeviceInfo SetupDiGetClassDevsW

kernel32

GetTickCount FileTimeToLocalFileTime GetFileAttributesW GetFileTime HeapAlloc HeapFree GetCommandLineA GetProcessHeap RtlUnwind ExitProcess ExitThread CreateThread RaiseException HeapReAlloc HeapSize VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent VirtualFree HeapDestroy GetStdHandle GetModuleFileNameA GetCPInfo GetACP GetOEMCP LCMapStringA LCMapStringW SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetTimeZoneInformation GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA FileTimeToSystemTime GetFullPathNameW GetVolumeInformationW FindFirstFileW FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer GetThreadLocale lstrlenA InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags FormatMessageW LocalFree InterlockedDecrement MulDiv GetModuleHandleA GlobalFindAtomW CompareStringW LoadLibraryA GetVersionExA GetCurrentProcessId GetLastError SetLastError GlobalAddAtomW CreateEventW SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority GlobalUnlock lstrlenW WritePrivateProfileStringW FreeResource GlobalFree GetCurrentThread GetCurrentThreadId ConvertDefaultLocale GetModuleFileNameW GetVersion EnumResourceLanguagesW lstrcmpA GetLocaleInfoW LoadLibraryW CompareStringA InterlockedExchange GlobalLock lstrcmpW GlobalAlloc FreeLibrary GlobalDeleteAtom GetModuleHandleW GetProcAddress MultiByteToWideChar ReadFile WriteFile WideCharToMultiByte SetCommState GetCommState SetCommTimeouts GetCommTimeouts CreateFileW CloseHandle FindResourceW LoadResource LockResource SizeofResource Sleep HeapCreate

user32

CharUpperW RegisterClipboardFormatW PostThreadMessageW ReleaseCapture LoadCursorW SetCapture EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringW DrawTextExW DrawTextW TabbedTextOutW DestroyMenu ShowWindow MoveWindow SetWindowTextW IsDialogMessageW RegisterWindowMessageW SendDlgItemMessageW SendDlgItemMessageA WinHelpW IsChild GetCapture GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW GetWindowTextLengthW GetWindowTextW GetForegroundWindow GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow UpdateWindow GetMenu GetSubMenu GetMenuItemID GetMenuItemCount CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW GetSysColor AdjustWindowRectEx EqualRect PtInRect GetDlgCtrlID DefWindowProcW CallWindowProcW OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect ReleaseDC GetDC CopyRect GetWindowThreadProcessId GetLastActivePopup MessageBoxW SetCursor SetWindowsHookExW CallNextHookEx GetMessageW TranslateMessage DispatchMessageW IsWindowVisible GetKeyState PeekMessageW GetCursorPos ValidateRect GetSysColorBrush MessageBeep GetNextDlgGroupItem InvalidateRgn SetMenuItemBitmaps GetMenuCheckMarkDimensions InvalidateRect SetRect IsRectEmpty CopyAcceleratorTableW SetFocus CharNextW GetFocus ModifyMenuW GetMenuState EnableMenuItem CheckMenuItem GetDesktopWindow GetActiveWindow SetActiveWindow CreateDialogIndirectParamW DestroyWindow IsWindow GetDlgItem IsWindowEnabled GetNextDlgTabItem EndDialog GetWindow SetWindowContextHelpId GetParent MapDialogRect SetWindowPos PostQuitMessage PostMessageW EnableWindow SendMessageW LoadBitmapW DrawIcon GetClientRect GetSystemMetrics IsIconic SetWindowLongW GetWindowLongW AppendMenuW GetSystemMenu LoadIconW UnregisterClassA

gdi32

ExtSelectClipRgn DeleteDC Escape GetStockObject GetDeviceCaps GetBkColor GetTextColor GetRgnBox GetMapMode TextOutW RectVisible PtVisible GetWindowExtEx ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SetTextColor GetClipBox CreateRectRgnIndirect CreateBitmap GetViewportExtEx DeleteObject SetMapMode RestoreDC SaveDC ExtTextOutW GetObjectW SetBkColor SelectObject

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW OpenPrinterW ClosePrinter

advapi32

RegDeleteKeyW RegQueryValueW RegOpenKeyW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCreateKeyExW RegOpenKeyExW RegCloseKey

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameW PathStripToRootW PathFindExtensionW PathIsUNCW

oledlg

OleUIBusyW

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoRevokeClassObject CoTaskMemAlloc CoTaskMemFree CLSIDFromString CLSIDFromProgID OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter

oleaut32

VariantCopy SysFreeString SysAllocString SafeArrayDestroy SystemTimeToVariantTime VariantTimeToSystemTime OleCreateFontIndirect SysStringLen VariantInit VariantChangeType VariantClear SysAllocStringLen