emotet_exe_e4_af13fc97525330c017e2a4785adff36aa66e70b3f400b540ad73e7190b8c7c2d_2022-02-08__000029[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e4_af13fc97525330c017e2a4785adff36aa66e70b3f400b540ad73e7190b8c7c2d_2022-02-08__000029.exe
Size 608KB
Sample220208-aaxetaahem
SHA256 af13fc97525330c017e2a4785adff36aa66e70b3f400b540ad73e7190b8c7c2d
MD5 b9f6a0c87776af7c4bd27b9911e3ac24
SHA1 eb4255ab752208660d72bea062c8b4e836d5ccf4
SHA512 a1521e834c60e13286341fc8321cc28aeeb6359e05890ee4fb51f48a43607bf2138e617e1a0db957f4937664a1ff5e74a0b3c2136b40f759a13639879dcf5661
SSDEEP 6144:x42k6LwFPw91EDbkUE39P7pyADYzqlEDFmZ4s3wAD6cvIpxUIVZFoEXlbeZhp4g:x409qDb109PdyOYzq3o3fVbeFTi40
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_af13fc97525330c017e2a4785adff36aa66e70b3f400b540ad73e7190b8c7c2d_2022-02-08__000029.exe

.dll 608KB

emotet_exe_e4_af13fc97525330c017e2a4785adff36aa66e70b3f400b540ad73e7190b8c7c2d_2022-02-08__000029.exe

IMPHASH bf1ebe22ec6f51f906ec295a3a5c6d92
SHA256 af13fc97525330c017e2a4785adff36aa66e70b3f400b540ad73e7190b8c7c2d
MD5 b9f6a0c87776af7c4bd27b9911e3ac24
SHA1 eb4255ab752208660d72bea062c8b4e836d5ccf4
SHA512 a1521e834c60e13286341fc8321cc28aeeb6359e05890ee4fb51f48a43607bf2138e617e1a0db957f4937664a1ff5e74a0b3c2136b40f759a13639879dcf5661
SSDEEP 6144:x42k6LwFPw91EDbkUE39P7pyADYzqlEDFmZ4s3wAD6cvIpxUIVZFoEXlbeZhp4g:x409qDb109PdyOYzq3o3fVbeFTi40
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

123345

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationW GetFullPathNameW GetTickCount HeapReAlloc GetCommandLineA RtlUnwind RaiseException HeapSize GetSystemInfo VirtualQuery TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep HeapDestroy HeapCreate GetStdHandle GetModuleFileNameA GetCPInfo GetACP GetOEMCP GetCurrentProcess GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetTimeZoneInformation LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA DuplicateHandle SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile lstrlenA InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags FormatMessageW LocalFree GetFileTime GetFileSize GetFileAttributesW CreateFileW FileTimeToLocalFileTime FileTimeToSystemTime MulDiv GetModuleHandleA InterlockedDecrement GlobalFindAtomW CompareStringW GetVersionExA GetCurrentProcessId GlobalAddAtomW CloseHandle GlobalUnlock WritePrivateProfileStringW FreeResource GlobalFree GetCurrentThread GetCurrentThreadId ConvertDefaultLocale GetModuleFileNameW GetVersion EnumResourceLanguagesW lstrcmpA GetLocaleInfoW LoadLibraryW WideCharToMultiByte CompareStringA MultiByteToWideChar InterlockedExchange GlobalLock lstrcmpW GlobalAlloc GlobalDeleteAtom GetModuleHandleW CreateProcessW GetCurrentDirectoryW FindClose FindNextFileW FindFirstFileW FindResourceW LoadResource LockResource SizeofResource ExitProcess GetLastError GetThreadLocale lstrlenW HeapFree GetProcessHeap HeapAlloc GetNativeSystemInfo FreeLibrary GetProcAddress LoadLibraryA VirtualFree VirtualAlloc IsBadReadPtr VirtualProtect SetHandleCount SetLastError

user32

RegisterClipboardFormatW PostThreadMessageW CopyAcceleratorTableW CharNextW ReleaseCapture LoadCursorW SetCapture EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringW DrawTextExW DrawTextW TabbedTextOutW MoveWindow SetWindowTextW IsDialogMessageW DestroyMenu RegisterWindowMessageW SendDlgItemMessageW SendDlgItemMessageA WinHelpW IsChild GetCapture GetClassLongW GetClassNameW SetPropW GetPropW SetFocus GetWindowTextLengthW GetWindowTextW GetForegroundWindow GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow UpdateWindow GetMenu GetSubMenu GetMenuItemID GetMenuItemCount CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW GetSysColor AdjustWindowRectEx EqualRect CopyRect PtInRect GetDlgCtrlID DefWindowProcW CallWindowProcW SetWindowLongW OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindowThreadProcessId GetLastActivePopup MessageBoxW SetCursor SetWindowsHookExW CallNextHookEx GetMessageW TranslateMessage DispatchMessageW IsWindowVisible GetKeyState PeekMessageW GetCursorPos ValidateRect CharUpperW GetSysColorBrush MessageBeep SetMenuItemBitmaps GetMenuCheckMarkDimensions GetNextDlgGroupItem InvalidateRgn InvalidateRect SetRect RemovePropW IsRectEmpty LoadBitmapW GetFocus ModifyMenuW GetMenuState EnableMenuItem CheckMenuItem GetDesktopWindow GetActiveWindow SetActiveWindow CreateDialogIndirectParamW DestroyWindow IsWindow GetWindowLongW GetDlgItem IsWindowEnabled GetNextDlgTabItem EndDialog GetWindow SetWindowContextHelpId GetParent MapDialogRect SetWindowPos PostQuitMessage PostMessageW EnableWindow SendMessageW DrawIcon GetClientRect GetSystemMetrics IsIconic AppendMenuW GetSystemMenu ShowWindow LoadIconW UnregisterClassA

gdi32

PtVisible ExtSelectClipRgn DeleteDC GetStockObject GetDeviceCaps GetTextColor CreateRectRgnIndirect GetRgnBox GetMapMode GetWindowExtEx GetViewportExtEx ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape TextOutW GetBkColor CreateBitmap DeleteObject SetMapMode RestoreDC SaveDC ExtTextOutW GetObjectW SetBkColor SetTextColor GetClipBox RectVisible

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW OpenPrinterW ClosePrinter

advapi32

RegDeleteKeyW RegQueryValueW RegOpenKeyW RegEnumKeyW RegCloseKey RegSetValueExW RegCreateKeyExW RegOpenKeyExW RegQueryValueExW

shell32

SHGetMalloc SHGetPathFromIDListW SHGetFolderLocation SHBrowseForFolderW

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameW PathStripToRootW PathFindExtensionW PathIsUNCW

oledlg

OleUIBusyW

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoRevokeClassObject CoTaskMemAlloc CoTaskMemFree CLSIDFromString CLSIDFromProgID OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter

oleaut32

VariantCopy SysAllocString SafeArrayDestroy SystemTimeToVariantTime VariantTimeToSystemTime OleCreateFontIndirect SysStringLen VariantInit VariantChangeType VariantClear SysAllocStringLen SysFreeString