emotet_exe_e4_fefc79419499d4f758590552befef4872316d76b5a016ed741c00a5266456988_2022-02-07__181955[.]exe

General

Target
emotet_exe_e4_fefc79419499d4f758590552befef4872316d76b5a016ed741c00a5266456988_2022-02-07__181955.exe
Size 1.4MB
Sample220207-wysmesfcaq
SHA256 fefc79419499d4f758590552befef4872316d76b5a016ed741c00a5266456988
MD5 04b05d08bc1dde8b96d4503d3c67b8ac
SHA1 27650cdee12588443e7fb69b58788e45ef07193c
SHA512 d6406b26df96199161287a3871c174f427f43eb2f14aa183cfb2330419969a4c4a7a86bd7d995258f303ce59f15cd28e94c3089186ea3051f239d041aed641f3
SSDEEP 24576:j8WOq42ilV2vqFxT+sorKKYjz3In7Hc8f8yDDPxS2FT6:jPOq4Z2CxTO2jzO7H/8y3PA2FT6
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_fefc79419499d4f758590552befef4872316d76b5a016ed741c00a5266456988_2022-02-07__181955.exe

.dll 1.4MB

emotet_exe_e4_fefc79419499d4f758590552befef4872316d76b5a016ed741c00a5266456988_2022-02-07__181955.exe

IMPHASH c504da6c2f14f8c4ba0fde70a6093ac9
SHA256 fefc79419499d4f758590552befef4872316d76b5a016ed741c00a5266456988
MD5 04b05d08bc1dde8b96d4503d3c67b8ac
SHA1 27650cdee12588443e7fb69b58788e45ef07193c
SHA512 d6406b26df96199161287a3871c174f427f43eb2f14aa183cfb2330419969a4c4a7a86bd7d995258f303ce59f15cd28e94c3089186ea3051f239d041aed641f3
SSDEEP 24576:j8WOq42ilV2vqFxT+sorKKYjz3In7Hc8f8yDDPxS2FT6:jPOq4Z2CxTO2jzO7H/8y3PA2FT6
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

732795

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualAlloc VirtualProtect GetProcAddress LoadLibraryA WideCharToMultiByte InitOnceBeginInitialize InitOnceComplete MultiByteToWideChar GetStringTypeW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetCPInfo CloseHandle InitializeCriticalSectionAndSpinCount SetEvent ResetEvent WaitForSingleObjectEx CreateEventW GetModuleHandleW IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead HeapSize RaiseException RtlUnwind InterlockedFlushSList GetLastError SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle GetFileType GetModuleFileNameW GetModuleHandleExW WriteConsoleW ExitProcess HeapAlloc HeapFree WriteFile OutputDebugStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap SetStdHandle CreateFileW SetEndOfFile

Sharing