emotet_exe_e4_5440265a051dc829432be70c8d6d10c7694946a5393b27b2c1de5bb559f2eecd_2022-02-03__161558[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e4_5440265a051dc829432be70c8d6d10c7694946a5393b27b2c1de5bb559f2eecd_2022-02-03__161558.exe
Size 633KB
Sample220203-tree4sbfa8
SHA256 5440265a051dc829432be70c8d6d10c7694946a5393b27b2c1de5bb559f2eecd
MD5 803a85e49068c526d147113f0f8cca7b
SHA1 b70e71b603d8499c2104dd729ae9c9a06791449f
SHA512 87de40f5f6ba5fe804c5ae97a0cff9ec48d0dc839d17541404578c355c0c4b3b1b8caa424ac9832c2d58d6183b6dcdc37ce64aa1b9539b27851e077b1d0794a0
SSDEEP 12288:JM7IInWhxQohUR0Oll7BHKYBP57+7/Q0xIop1KpR:JynoxcCOllFxBPs7LxIop1KH
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_5440265a051dc829432be70c8d6d10c7694946a5393b27b2c1de5bb559f2eecd_2022-02-03__161558.exe

.dll 633KB

emotet_exe_e4_5440265a051dc829432be70c8d6d10c7694946a5393b27b2c1de5bb559f2eecd_2022-02-03__161558.exe

IMPHASH b9f8de16582cbde137fb46ff67f27488
SHA256 5440265a051dc829432be70c8d6d10c7694946a5393b27b2c1de5bb559f2eecd
MD5 803a85e49068c526d147113f0f8cca7b
SHA1 b70e71b603d8499c2104dd729ae9c9a06791449f
SHA512 87de40f5f6ba5fe804c5ae97a0cff9ec48d0dc839d17541404578c355c0c4b3b1b8caa424ac9832c2d58d6183b6dcdc37ce64aa1b9539b27851e077b1d0794a0
SSDEEP 12288:JM7IInWhxQohUR0Oll7BHKYBP57+7/Q0xIop1KpR:JynoxcCOllFxBPs7LxIop1KH
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

93216

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SwitchToThread SetFileApisToOEM GetLastError GetSystemDefaultUILanguage GetCurrentThreadId GetUserDefaultLangID GetEnvironmentStringsW GetThreadErrorMode GetOEMCP IsDebuggerPresent GetTickCount GetCurrentProcessorNumber GetUserDefaultUILanguage TlsAlloc FlushProcessWriteBuffers UnregisterApplicationRestart RaiseException InitializeCriticalSectionEx DeleteCriticalSection DecodePointer MultiByteToWideChar LoadResource SizeofResource FindResourceW GetModuleHandleW GetACP LoadLibraryExW GetModuleFileNameW lstrcmpiW FreeLibrary WriteConsoleW CreateFileW ReadConsoleW SetStdHandle FreeEnvironmentStringsW GetCommandLineW GetCommandLineA IsValidCodePage FindNextFileW FindFirstFileExW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetConsoleMode GetConsoleOutputCP WriteFile FlushFileBuffers SetFilePointerEx GetProcessHeap GetThreadUILanguage CloseHandle ReadFile FindClose GetTickCount64 GetProcAddress LoadLibraryA GetFileSizeEx HeapSize GetFileType GetStdHandle HeapFree HeapReAlloc HeapAlloc GetModuleHandleExW ExitProcess InterlockedFlushSList RtlUnwind OutputDebugStringW GetCPInfo GetStringTypeW GetLocaleInfoW LCMapStringW TlsFree EnterCriticalSection LeaveCriticalSection SetEvent ResetEvent WaitForSingleObjectEx CreateEventW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead WideCharToMultiByte EncodePointer SetLastError InitializeCriticalSectionAndSpinCount TlsGetValue TlsSetValue

user32

GetMessageExtraInfo GetForegroundWindow IsProcessDPIAware GetClipboardViewer EmptyClipboard InSendMessage GetMenuCheckMarkDimensions GetActiveWindow CloseClipboard AnyPopup CharNextW GetDesktopWindow GetKBCodePage GetOpenClipboardWindow GetCapture

gdi32

GdiFlush

advapi32

RegSetValueExW RegEnumKeyExW RegCloseKey RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegOpenKeyExW RegQueryInfoKeyW

shell32

InitNetworkAddressControl

ole32

CoTaskMemAlloc CoTaskMemRealloc CoCreateInstance CoTaskMemFree OleUninitialize

oleaut32

VarUI4FromStr

Name

.text

Size

203KB

Virtual Size

202KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

194KB

Virtual Size

193KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

1024B

Virtual Size

844B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

209KB

Virtual Size

209KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

20KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ