emotet_exe_e4_49027235bca4853d14d8d8c3de9d29ea53bec39ff49e3f32f9fa6c285a2b78d7_2022-02-07__181954[.]exe

General

Target
emotet_exe_e4_49027235bca4853d14d8d8c3de9d29ea53bec39ff49e3f32f9fa6c285a2b78d7_2022-02-07__181954.exe
Size 1.4MB
Sample220207-wysmesfcap
SHA256 49027235bca4853d14d8d8c3de9d29ea53bec39ff49e3f32f9fa6c285a2b78d7
MD5 e6c4355938512be9a9abebb3388b14b2
SHA1 9bd5c9f21e7f837645e0bb0ed6bae15d47124809
SHA512 da02d4eb1d367089e45cb6893792be4ccaa75ac8ae0a15971c4c8a48e95398667666517c4bc70654b7be1d1650299bc0c6c53429ca3d54c0999b92c436dcdf68
SSDEEP 24576:j8WOq42ilV2vqFxT+sorKKYjz3In7Hc8f8yDDPxS2FTC:jPOq4Z2CxTO2jzO7H/8y3PA2FTC
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_49027235bca4853d14d8d8c3de9d29ea53bec39ff49e3f32f9fa6c285a2b78d7_2022-02-07__181954.exe

.dll 1.4MB

emotet_exe_e4_49027235bca4853d14d8d8c3de9d29ea53bec39ff49e3f32f9fa6c285a2b78d7_2022-02-07__181954.exe

IMPHASH c504da6c2f14f8c4ba0fde70a6093ac9
SHA256 49027235bca4853d14d8d8c3de9d29ea53bec39ff49e3f32f9fa6c285a2b78d7
MD5 e6c4355938512be9a9abebb3388b14b2
SHA1 9bd5c9f21e7f837645e0bb0ed6bae15d47124809
SHA512 da02d4eb1d367089e45cb6893792be4ccaa75ac8ae0a15971c4c8a48e95398667666517c4bc70654b7be1d1650299bc0c6c53429ca3d54c0999b92c436dcdf68
SSDEEP 24576:j8WOq42ilV2vqFxT+sorKKYjz3In7Hc8f8yDDPxS2FTC:jPOq4Z2CxTO2jzO7H/8y3PA2FTC
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

732795

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualAlloc VirtualProtect GetProcAddress LoadLibraryA WideCharToMultiByte InitOnceBeginInitialize InitOnceComplete MultiByteToWideChar GetStringTypeW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetCPInfo CloseHandle InitializeCriticalSectionAndSpinCount SetEvent ResetEvent WaitForSingleObjectEx CreateEventW GetModuleHandleW IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead HeapSize RaiseException RtlUnwind InterlockedFlushSList GetLastError SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle GetFileType GetModuleFileNameW GetModuleHandleExW WriteConsoleW ExitProcess HeapAlloc HeapFree WriteFile OutputDebugStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap SetStdHandle CreateFileW SetEndOfFile

Sharing