emotet_exe_e5_346b3d846e41719ca90747ed7bc02ddf0a9fa221e1b99b16b03d7b889d36b157_2022-02-03__191949[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e5_346b3d846e41719ca90747ed7bc02ddf0a9fa221e1b99b16b03d7b889d36b157_2022-02-03__191949.exe
Size 621KB
Sample220203-x19jdsdcgp
SHA256 346b3d846e41719ca90747ed7bc02ddf0a9fa221e1b99b16b03d7b889d36b157
MD5 9e02d6731c576453d81e7b7402079b55
SHA1 a49e957035d84ccb6d63879f658cab3159ae9c71
SHA512 1f48a831a4b2c857972cf7a8c5ec500e1b658f9a5b6026db16d6c0150b877f780530dea0c200008c4134acacc9fa2e2f3569b5db244160909f5818dd5094bc16
SSDEEP 12288:8m9+I/aI+W1QbBi3IjeuXe6q7nCP/xCMqYDl2JwDKCX:8XrbB2IjevCkMqW2uX
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e5_346b3d846e41719ca90747ed7bc02ddf0a9fa221e1b99b16b03d7b889d36b157_2022-02-03__191949.exe

.dll 621KB

emotet_exe_e5_346b3d846e41719ca90747ed7bc02ddf0a9fa221e1b99b16b03d7b889d36b157_2022-02-03__191949.exe

IMPHASH 15b471bbc15a140b9567d4daee05d632
SHA256 346b3d846e41719ca90747ed7bc02ddf0a9fa221e1b99b16b03d7b889d36b157
MD5 9e02d6731c576453d81e7b7402079b55
SHA1 a49e957035d84ccb6d63879f658cab3159ae9c71
SHA512 1f48a831a4b2c857972cf7a8c5ec500e1b658f9a5b6026db16d6c0150b877f780530dea0c200008c4134acacc9fa2e2f3569b5db244160909f5818dd5094bc16
SSDEEP 12288:8m9+I/aI+W1QbBi3IjeuXe6q7nCP/xCMqYDl2JwDKCX:8XrbB2IjevCkMqW2uX
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

92531

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsSystemResumeAutomatic GetErrorMode GetCurrentThreadId GetTickCount UnregisterApplicationRecoveryCallback GetLogicalDrives GetCommandLineA GetUserDefaultLangID GetEnvironmentStringsW GetThreadErrorMode AreFileApisANSI GetOEMCP GetSystemDefaultLangID GetCurrentProcess SwitchToThread IsDebuggerPresent TlsAlloc SetFileApisToOEM RaiseException GetLastError InitializeCriticalSectionEx DeleteCriticalSection DecodePointer MultiByteToWideChar LoadResource SizeofResource GetUserDefaultUILanguage GetModuleHandleW GetProcAddress LoadLibraryExW GetModuleFileNameW lstrcmpiW FreeLibrary WriteConsoleW CreateFileW ReadConsoleW SetStdHandle FreeEnvironmentStringsW GetCommandLineW IsValidCodePage FindNextFileW FindFirstFileExW GetConsoleMode GetConsoleOutputCP WriteFile FlushFileBuffers SetFilePointerEx GetFileSizeEx HeapSize EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetFileType GetStdHandle GetProcessHeap GetACP CloseHandle ReadFile FindClose LoadLibraryA GetTickCount64 FindResourceW HeapFree HeapReAlloc HeapAlloc GetModuleHandleExW ExitProcess InterlockedFlushSList RtlUnwind OutputDebugStringW GetCPInfo GetStringTypeW GetLocaleInfoW LCMapStringW TlsFree TlsSetValue TlsGetValue InitializeCriticalSectionAndSpinCount SetLastError EncodePointer WideCharToMultiByte EnterCriticalSection LeaveCriticalSection SetEvent ResetEvent WaitForSingleObjectEx CreateEventW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead

user32

EmptyClipboard InSendMessage GetShellWindow GetMessageExtraInfo GetProcessWindowStation CreateMenu IsWow64Message GetActiveWindow SetCursor LoadCursorW CharNextW GetMessageTime GetFocus

advapi32

RegSetValueExW RegQueryInfoKeyW RegEnumKeyExW RegCloseKey RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegOpenKeyExW

shell32

InitNetworkAddressControl

ole32

CoTaskMemFree CoCreateInstance CoTaskMemRealloc CoTaskMemAlloc CoUninitialize

oleaut32

VarUI4FromStr

wininet

InternetQueryDataAvailable

Name

.text

Size

205KB

Virtual Size

204KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

195KB

Virtual Size

194KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

1024B

Virtual Size

844B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

194KB

Virtual Size

193KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

20KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ