emotet_exe_e5_311174c941f3a931391c2c81b7a4aef416f2cbf291a6432a0aff39190b10c521_2022-02-03__174437[.]exe

General

Target
emotet_exe_e5_311174c941f3a931391c2c81b7a4aef416f2cbf291a6432a0aff39190b10c521_2022-02-03__174437.exe
Size 324KB
Sample220203-wbtwzaceh4
SHA256 311174c941f3a931391c2c81b7a4aef416f2cbf291a6432a0aff39190b10c521
MD5 1e60b69235c42c7b2e304db9701ff5c9
SHA1 c1aa570aa93da61fa874ce38f0180ad0f99ff7c8
SHA512 dc4b00954f8f70903d518cf15c09752d3bb48d470d5f3f8bd765d91d3111a7566a2bcd1cb051136824f38d211cd72caa0c4d8bf0e57d3b2ce07ce28b91c2697e
SSDEEP 6144:83DvZRFTFbksYyljaMYDMNT7k+At+5fAzHKP5hET++oRFToJ5w:83BZbttaMYwLAtgpPox5w
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e5_311174c941f3a931391c2c81b7a4aef416f2cbf291a6432a0aff39190b10c521_2022-02-03__174437.exe

.dll 324KB

emotet_exe_e5_311174c941f3a931391c2c81b7a4aef416f2cbf291a6432a0aff39190b10c521_2022-02-03__174437.exe

IMPHASH 1f2625d8cbde95b8a56d0ba2d95bab06
SHA256 311174c941f3a931391c2c81b7a4aef416f2cbf291a6432a0aff39190b10c521
MD5 1e60b69235c42c7b2e304db9701ff5c9
SHA1 c1aa570aa93da61fa874ce38f0180ad0f99ff7c8
SHA512 dc4b00954f8f70903d518cf15c09752d3bb48d470d5f3f8bd765d91d3111a7566a2bcd1cb051136824f38d211cd72caa0c4d8bf0e57d3b2ce07ce28b91c2697e
SSDEEP 6144:83DvZRFTFbksYyljaMYDMNT7k+At+5fAzHKP5hET++oRFToJ5w:83BZbttaMYwLAtgpPox5w
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

91536

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

bcrypt

BCryptGenRandom

kernel32

RaiseException CreateFileW HeapFree HeapReAlloc GetProcessHeap HeapAlloc GetModuleHandleA GetProcAddress TlsGetValue TlsSetValue WaitForSingleObjectEx LoadLibraryA GetCurrentProcess CreateMutexA CloseHandle ReleaseMutex SetLastError GetEnvironmentVariableW GetLastError GetStdHandle GetConsoleMode WriteFile WriteConsoleW GetCurrentDirectoryW GetCurrentThread RtlCaptureContext AcquireSRWLockShared AcquireSRWLockExclusive ReleaseSRWLockExclusive ReleaseSRWLockShared GetCommandLineW CreateFileA SetFilePointerEx UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW DecodePointer RtlUnwind InterlockedFlushSList EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW GetFileType GetStringTypeW HeapSize SetStdHandle FlushFileBuffers GetConsoleOutputCP

user32

ReleaseDC GetDC GetWindowRect

Sharing