emotet_exe_e5_e7068883e401d8b0e99d9f4ac4653c588039480eb735965e5baeaaab53740c3e_2022-02-02__000515[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e5_e7068883e401d8b0e99d9f4ac4653c588039480eb735965e5baeaaab53740c3e_2022-02-02__000515.exe
Size 520KB
Sample220202-adthbsdchm
SHA256 e7068883e401d8b0e99d9f4ac4653c588039480eb735965e5baeaaab53740c3e
MD5 b5ef6b666babfcd26e4fd581fc4eb448
SHA1 290aaae11f715293d3df7308138017c89bf699ad
SHA512 e2260c2222a3920fbf2ccadec14f6fc49c2006176e9ca20db571664087270a95b9ff5b2c5583aa43fc97402868e9af22a0d4ea9e5e87d3d83123f521a77bdef6
SSDEEP 12288:fGsy6sTuYND0D/SAzblQC1O1/1Q111s1c1P1T1V19Z1g1t1o1Z1nidamdRr5fIR:fFy6iND0D/nl/1O1/1Q111s1c1P1T1V
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e5_e7068883e401d8b0e99d9f4ac4653c588039480eb735965e5baeaaab53740c3e_2022-02-02__000515.exe

.dll 520KB

emotet_exe_e5_e7068883e401d8b0e99d9f4ac4653c588039480eb735965e5baeaaab53740c3e_2022-02-02__000515.exe

IMPHASH 4f614d8b5d6db43e16a7179103e38ad8
SHA256 e7068883e401d8b0e99d9f4ac4653c588039480eb735965e5baeaaab53740c3e
MD5 b5ef6b666babfcd26e4fd581fc4eb448
SHA1 290aaae11f715293d3df7308138017c89bf699ad
SHA512 e2260c2222a3920fbf2ccadec14f6fc49c2006176e9ca20db571664087270a95b9ff5b2c5583aa43fc97402868e9af22a0d4ea9e5e87d3d83123f521a77bdef6
SSDEEP 12288:fGsy6sTuYND0D/SAzblQC1O1/1Q111s1c1P1T1V19Z1g1t1o1Z1nidamdRr5fIR:fFy6iND0D/nl/1O1/1Q111s1c1P1T1V
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

137953

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

setupapi

SetupDiGetClassDevsA SetupDiGetDeviceRegistryPropertyA SetupDiEnumDeviceInterfaces SetupDiGetDeviceInterfaceDetailA SetupDiDestroyDeviceInfoList

kernel32

GetOEMCP FileTimeToLocalFileTime GetFileAttributesA GetFileSizeEx GetFileTime GetTickCount RtlUnwind RaiseException GetCommandLineA GetSystemInfo HeapReAlloc Sleep ExitProcess HeapSize GetACP IsValidCodePage TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo HeapDestroy GetStdHandle SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW GetTimeZoneInformation LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GlobalFlags WritePrivateProfileStringA FileTimeToSystemTime GetThreadLocale InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedDecrement GlobalGetAtomNameA GlobalFindAtomA lstrcmpW FreeResource GetCurrentProcessId GlobalAddAtomA GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetModuleFileNameA GetLocaleInfoA CompareStringA InterlockedExchange lstrcmpA GetModuleHandleA GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MultiByteToWideChar MulDiv lstrlenA OutputDebugStringA FindResourceW GetModuleHandleW HeapAlloc GetProcessHeap HeapFree FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr VirtualProtect SetLastError VirtualAlloc VirtualFree VirtualQuery GetVersionExA CreateFileA CloseHandle GetLastError WideCharToMultiByte FindResourceA LoadResource LockResource SizeofResource HeapCreate

user32

RegisterClipboardFormatA PostThreadMessageA SetRect IsRectEmpty CopyAcceleratorTableA CharNextA CharUpperA ReleaseCapture SetCapture LoadCursorA GetSysColorBrush EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA DestroyMenu ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA GetWindowTextA GetForegroundWindow GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints SetMenu SetForegroundWindow UpdateWindow CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx EqualRect CopyRect PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA GetMenu SetWindowLongA OffsetRect IntersectRect SystemParametersInfoA DrawIcon AppendMenuA SendMessageA GetSystemMenu GetWindowPlacement GetWindowRect GetWindow SetWindowContextHelpId MapDialogRect SetWindowPos GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow IsWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetWindowLongA MessageBeep GetNextDlgGroupItem InvalidateRgn SetFocus InvalidateRect IsIconic GetClientRect EnableWindow LoadIconA GetSystemMetrics GetSubMenu GetMenuItemCount GetMenuItemID GetMenuState PostQuitMessage PostMessageA CheckMenuItem EnableMenuItem ModifyMenuA GetParent GetFocus LoadBitmapA GetMenuCheckMarkDimensions SetMenuItemBitmaps ValidateRect GetCursorPos PeekMessageA GetKeyState IsWindowVisible GetActiveWindow DispatchMessageA TranslateMessage GetMessageA CallNextHookEx SetWindowsHookExA SetCursor MessageBoxA IsWindowEnabled GetLastActivePopup GetCapture

gdi32

ExtSelectClipRgn DeleteDC GetStockObject GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetMapMode ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx GetClipBox CreateBitmap GetDeviceCaps Escape TextOutA RectVisible PtVisible GetWindowExtEx GetViewportExtEx DeleteObject SetMapMode RestoreDC SaveDC ExtTextOutA GetObjectA SetBkColor SetTextColor SelectObject

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA ClosePrinter OpenPrinterA

advapi32

RegOpenKeyA RegSetValueExA RegCreateKeyExA RegQueryValueA RegCloseKey RegEnumKeyA RegDeleteKeyA RegEnumKeyExA RegOpenKeyExA RegQueryValueExA

comctl32

ord17

shlwapi

PathFindFileNameA PathStripToRootA PathIsUNCA PathFindExtensionA

oledlg

ord8

ole32

CoRevokeClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject OleIsCurrentClipboard CLSIDFromString CLSIDFromProgID CoTaskMemAlloc CoTaskMemFree OleFlushClipboard CoRegisterMessageFilter

oleaut32

SysStringLen SysFreeString SysAllocStringByteLen SysAllocString SysAllocStringLen VariantClear VariantChangeType VariantInit VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime OleCreateFontIndirect