emotet_exe_e4_61ad8ff7b576e3934e9a31555769f42d7d515f8a618aee4e3898040a7c0bdb55_2022-02-13__053544[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e4_61ad8ff7b576e3934e9a31555769f42d7d515f8a618aee4e3898040a7c0bdb55_2022-02-13__053544.exe
Size 339KB
Sample220213-gal3eagcbr
SHA256 61ad8ff7b576e3934e9a31555769f42d7d515f8a618aee4e3898040a7c0bdb55
MD5 d5f75fc47d25aad6dbd201b8493dd5e6
SHA1 ba308da10cb40732048c908247b1782f6c5ba3eb
SHA512 cb42f7d2d3dec9ba5a03ed49c8d110de5741c109f96669d2341068a02f80d0d7511fedab0ad4879e012f3a9c90b37206150310d57b195d54374f8b610ec1b249
SSDEEP 6144:3QfYaJlKdMDan9+2VhqOWOLt5ZZnB9iHC4CqhAMQvYj:3Qw+CM2n9+6qsRlSLhp
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_61ad8ff7b576e3934e9a31555769f42d7d515f8a618aee4e3898040a7c0bdb55_2022-02-13__053544.exe

.dll 339KB

emotet_exe_e4_61ad8ff7b576e3934e9a31555769f42d7d515f8a618aee4e3898040a7c0bdb55_2022-02-13__053544.exe

IMPHASH c0eaca862e71892f0b09074d92f8955f
SHA256 61ad8ff7b576e3934e9a31555769f42d7d515f8a618aee4e3898040a7c0bdb55
MD5 d5f75fc47d25aad6dbd201b8493dd5e6
SHA1 ba308da10cb40732048c908247b1782f6c5ba3eb
SHA512 cb42f7d2d3dec9ba5a03ed49c8d110de5741c109f96669d2341068a02f80d0d7511fedab0ad4879e012f3a9c90b37206150310d57b195d54374f8b610ec1b249
SSDEEP 6144:3QfYaJlKdMDan9+2VhqOWOLt5ZZnB9iHC4CqhAMQvYj:3Qw+CM2n9+6qsRlSLhp
MD5 SHA1 SHA512 SSDEEP

Minor OS version

Major OS version

Entry point

100477

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

gdiplus

GdipDrawImageI GdipDrawLineI GdipDeletePen GdipCreatePen1 GdipDrawString GdipDeleteFont GdipCreateFont GdipDeleteFontFamily GdipCreateFontFamilyFromName GdipFillRectangleI GdipDeleteBrush GdipCreateSolidFill GdipCreateLineBrushFromRectI GdipGetImageGraphicsContext GdipCloneImage GdipDisposeImage GdipCreateBitmapFromScan0 GdipFree GdipAlloc GdipGetVisibleClipBoundsI GdipDeleteGraphics GdipCreateFromHDC GdiplusStartup

kernel32

SetFilePointer GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA HeapSize GetTickCount QueryPerformanceCounter CreateThread GetCommandLineW GetVersionExA CreateToolhelp32Snapshot GetLastError GetCurrentProcessId Process32First Process32Next CloseHandle ExitProcess CreateMutexA WaitForSingleObject ReleaseMutex SetThreadExecutionState DeviceIoControl FormatMessageW Sleep CreateFileW GetFileInformationByHandle FlushFileBuffers GetSystemTime SystemTimeToFileTime FindFirstFileW SetStdHandle FindClose GetSystemTimeAsFileTime GetFileAttributesExW GetCurrentProcess GetVolumePathNameW GetVolumeNameForVolumeMountPointW GetDiskFreeSpaceExW GetDriveTypeW GetVolumeInformationW FindFirstVolumeMountPointW FindNextVolumeMountPointW FindVolumeMountPointClose GetLogicalDriveStringsW GetModuleFileNameW GetShortPathNameW GetLongPathNameW DosDateTimeToFileTime LocalFileTimeToFileTime ReadFile GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType SetHandleCount GetConsoleMode GetConsoleCP MultiByteToWideChar RtlUnwind HeapCreate HeapDestroy VirtualAlloc VirtualFree InitializeCriticalSection LoadLibraryA WriteConsoleA SetEnvironmentVariableA GetConsoleOutputCP WriteConsoleW SetEndOfFile CreateFileA CompareStringA CompareStringW FindNextFileW GetProcAddress GetModuleHandleA HeapAlloc HeapReAlloc HeapFree GetTimeZoneInformation DeleteFileW GetCurrentThreadId GetCommandLineA GetProcessHeap TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException WideCharToMultiByte GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection

user32

DefWindowProcA EndPaint BeginPaint InvalidateRect PostQuitMessage DispatchMessageA TranslateMessage GetMessageA SetTimer UpdateWindow ShowWindow CreateWindowExW MessageBoxW RegisterClassExA LoadStringA LoadIconA LoadCursorA

gdi32

GetStockObject

advapi32

RegCloseKey RegQueryValueExW RegCreateKeyExW AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken

shell32

CommandLineToArgvW