emotet_exe_e4_14a0f3695db4520003e7a2ceb567d21345c1c49acf985e1f252460e7def95e6e_2022-02-02__000255[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e4_14a0f3695db4520003e7a2ceb567d21345c1c49acf985e1f252460e7def95e6e_2022-02-02__000255.exe
Size 684KB
Sample220202-ab61msdeh3
SHA256 14a0f3695db4520003e7a2ceb567d21345c1c49acf985e1f252460e7def95e6e
MD5 28b4e595ca93948f1f1f88e705a1b139
SHA1 f4fb3d0f6e362b54652bc9d99c1d7ee637010c76
SHA512 63f83f6eac787dbd8185abaa4eefeeced604ad81a319de76da2f79d8489d14788aed853b4ab7e86d39d296c71daa0d5c7bbc829cdd1c95149816b1a2fd946319
SSDEEP 6144:jpvac/hrq/4wi/fRBe06Av38/giQEjSdLZJ8iqOqnP9ypSlwDmL0TX9zZ7cuQUa:y4wwRBe01P8/giQE8zsES9W7PQUaIF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_14a0f3695db4520003e7a2ceb567d21345c1c49acf985e1f252460e7def95e6e_2022-02-02__000255.exe

.dll 684KB

emotet_exe_e4_14a0f3695db4520003e7a2ceb567d21345c1c49acf985e1f252460e7def95e6e_2022-02-02__000255.exe

IMPHASH e814289da191314c95270b178d374c43
SHA256 14a0f3695db4520003e7a2ceb567d21345c1c49acf985e1f252460e7def95e6e
MD5 28b4e595ca93948f1f1f88e705a1b139
SHA1 f4fb3d0f6e362b54652bc9d99c1d7ee637010c76
SHA512 63f83f6eac787dbd8185abaa4eefeeced604ad81a319de76da2f79d8489d14788aed853b4ab7e86d39d296c71daa0d5c7bbc829cdd1c95149816b1a2fd946319
SSDEEP 6144:jpvac/hrq/4wi/fRBe06Av38/giQEjSdLZJ8iqOqnP9ypSlwDmL0TX9zZ7cuQUa:y4wwRBe01P8/giQE8zsES9W7PQUaIF
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

128420

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

setupapi

SetupDiDestroyDeviceInfoList SetupDiOpenDevRegKey SetupDiGetDeviceRegistryPropertyW SetupDiEnumDeviceInfo SetupDiGetClassDevsW

kernel32

GetTickCount FileTimeToLocalFileTime GetFileAttributesW GetFileTime HeapAlloc HeapFree GetCommandLineA GetProcessHeap RtlUnwind ExitProcess ExitThread CreateThread RaiseException HeapReAlloc HeapSize VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent VirtualFree HeapDestroy GetStdHandle GetModuleFileNameA GetCPInfo GetACP GetOEMCP LCMapStringA LCMapStringW SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetTimeZoneInformation GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA FileTimeToSystemTime GetFullPathNameW GetVolumeInformationW FindFirstFileW FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer GetThreadLocale lstrlenA InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags FormatMessageW LocalFree InterlockedDecrement MulDiv GetModuleHandleA GlobalFindAtomW CompareStringW LoadLibraryA GetVersionExA GetCurrentProcessId GetLastError SetLastError GlobalAddAtomW CreateEventW SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority GlobalUnlock lstrlenW WritePrivateProfileStringW FreeResource GlobalFree GetCurrentThread GetCurrentThreadId ConvertDefaultLocale GetModuleFileNameW GetVersion EnumResourceLanguagesW lstrcmpA GetLocaleInfoW LoadLibraryW CompareStringA InterlockedExchange GlobalLock lstrcmpW GlobalAlloc FreeLibrary GlobalDeleteAtom GetModuleHandleW GetProcAddress MultiByteToWideChar ReadFile WriteFile WideCharToMultiByte SetCommState GetCommState SetCommTimeouts GetCommTimeouts CreateFileW CloseHandle FindResourceW LoadResource LockResource SizeofResource Sleep HeapCreate

user32

CharUpperW RegisterClipboardFormatW PostThreadMessageW ReleaseCapture LoadCursorW SetCapture EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringW DrawTextExW DrawTextW TabbedTextOutW DestroyMenu ShowWindow MoveWindow SetWindowTextW IsDialogMessageW RegisterWindowMessageW SendDlgItemMessageW SendDlgItemMessageA WinHelpW IsChild GetCapture GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW GetWindowTextLengthW GetWindowTextW GetForegroundWindow GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow UpdateWindow GetMenu GetSubMenu GetMenuItemID GetMenuItemCount CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW GetSysColor AdjustWindowRectEx EqualRect PtInRect GetDlgCtrlID DefWindowProcW CallWindowProcW OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect ReleaseDC GetDC CopyRect GetWindowThreadProcessId GetLastActivePopup MessageBoxW SetCursor SetWindowsHookExW CallNextHookEx GetMessageW TranslateMessage DispatchMessageW IsWindowVisible GetKeyState PeekMessageW GetCursorPos ValidateRect GetSysColorBrush MessageBeep GetNextDlgGroupItem InvalidateRgn SetMenuItemBitmaps GetMenuCheckMarkDimensions InvalidateRect SetRect IsRectEmpty CopyAcceleratorTableW SetFocus CharNextW GetFocus ModifyMenuW GetMenuState EnableMenuItem CheckMenuItem GetDesktopWindow GetActiveWindow SetActiveWindow CreateDialogIndirectParamW DestroyWindow IsWindow GetDlgItem IsWindowEnabled GetNextDlgTabItem EndDialog GetWindow SetWindowContextHelpId GetParent MapDialogRect SetWindowPos PostQuitMessage PostMessageW EnableWindow SendMessageW LoadBitmapW DrawIcon GetClientRect GetSystemMetrics IsIconic SetWindowLongW GetWindowLongW AppendMenuW GetSystemMenu LoadIconW UnregisterClassA

gdi32

ExtSelectClipRgn DeleteDC Escape GetStockObject GetDeviceCaps GetBkColor GetTextColor GetRgnBox GetMapMode TextOutW RectVisible PtVisible GetWindowExtEx ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SetTextColor GetClipBox CreateRectRgnIndirect CreateBitmap GetViewportExtEx DeleteObject SetMapMode RestoreDC SaveDC ExtTextOutW GetObjectW SetBkColor SelectObject

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW OpenPrinterW ClosePrinter

advapi32

RegDeleteKeyW RegQueryValueW RegOpenKeyW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCreateKeyExW RegOpenKeyExW RegCloseKey

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameW PathStripToRootW PathFindExtensionW PathIsUNCW

oledlg

OleUIBusyW

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoRevokeClassObject CoTaskMemAlloc CoTaskMemFree CLSIDFromString CLSIDFromProgID OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter

oleaut32

VariantCopy SysFreeString SysAllocString SafeArrayDestroy SystemTimeToVariantTime VariantTimeToSystemTime OleCreateFontIndirect SysStringLen VariantInit VariantChangeType VariantClear SysAllocStringLen