emotet_exe_e4_18523d8d2c155f96037fded23db475d574a20efddd5d707708cd1aefeb2d3519_2022-02-22__171219[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e4_18523d8d2c155f96037fded23db475d574a20efddd5d707708cd1aefeb2d3519_2022-02-22__171219.exe
Size 472KB
Sample220222-vreasacfap
SHA256 18523d8d2c155f96037fded23db475d574a20efddd5d707708cd1aefeb2d3519
MD5 35bcdf63d2497aad855ec4e52c177d75
SHA1 419b970b667b734d718ff0aeeacea8f3dd39302f
SHA512 c82f9cbeda0c5fc2c0f30e696c14f7850a4adfd8833f1c171bef8586ac9eed64c91e61bfb96ae66867eef5f925d33469ef5b5e6498c763507011336430609072
SSDEEP 12288:vicw4w2Vb0zq6k5Z2mTpjqkGXNrGHORQuBT:viSwub0W6LmTvwNyHZ8T
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_18523d8d2c155f96037fded23db475d574a20efddd5d707708cd1aefeb2d3519_2022-02-22__171219.exe

.dll 472KB

emotet_exe_e4_18523d8d2c155f96037fded23db475d574a20efddd5d707708cd1aefeb2d3519_2022-02-22__171219.exe

IMPHASH a63557e4e36a007beeb5ec927b9074c8
SHA256 18523d8d2c155f96037fded23db475d574a20efddd5d707708cd1aefeb2d3519
MD5 35bcdf63d2497aad855ec4e52c177d75
SHA1 419b970b667b734d718ff0aeeacea8f3dd39302f
SHA512 c82f9cbeda0c5fc2c0f30e696c14f7850a4adfd8833f1c171bef8586ac9eed64c91e61bfb96ae66867eef5f925d33469ef5b5e6498c763507011336430609072
SSDEEP 12288:vicw4w2Vb0zq6k5Z2mTpjqkGXNrGHORQuBT:viSwub0W6LmTvwNyHZ8T
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

153349

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineA RaiseException VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc Sleep ExitProcess HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate HeapDestroy VirtualFree GetStdHandle SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings HeapAlloc GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetACP IsValidCodePage InitializeCriticalSectionAndSpinCount GetTimeZoneInformation GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA HeapFree RtlUnwind GetTickCount GetFileTime GetFileSizeEx GetFileAttributesA FileTimeToLocalFileTime CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile FileTimeToSystemTime GetThreadLocale GetOEMCP GetCPInfo GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement GetModuleHandleW GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA InterlockedExchange lstrcmpA GetCurrentProcessId GetModuleFileNameA FreeResource GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom CompareStringA lstrcmpW GetVersionExA GetCurrentThreadId CloseHandle FreeLibrary InterlockedDecrement GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MultiByteToWideChar MulDiv lstrlenA WritePrivateProfileStringA GetPrivateProfileStringA WideCharToMultiByte FindResourceA LoadResource LockResource SizeofResource GetLastError SetLastError GetProcAddress GetModuleHandleA FreeEnvironmentStringsW LoadLibraryA

user32

SetRect InvalidateRgn GetNextDlgGroupItem RegisterClipboardFormatA PostThreadMessageA GetSysColorBrush SetWindowContextHelpId MapDialogRect GetDesktopWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog SetCursor PostQuitMessage DestroyMenu GetWindowThreadProcessId IsWindowEnabled MoveWindow SetWindowTextA IsDialogMessageA SetMenuItemBitmaps GetMenuCheckMarkDimensions ModifyMenuA CheckMenuItem RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA IsRectEmpty IsWindow SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow GetDlgItem GetTopWindow DestroyWindow GetMessagePos MapWindowPoints SetMenu SetForegroundWindow UpdateWindow PostMessageA MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect CopyRect PtInRect GetDlgCtrlID CallWindowProcA GetMenu GetWindowLongA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindow GetSysColor EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA SetWindowsHookExA CallNextHookEx CopyAcceleratorTableA CharNextA ReleaseCapture SetCapture CharUpperA GetFocus GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState PeekMessageA GetCursorPos ValidateRect UnhookWindowsHookEx GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu GetSystemMetrics CreateWindowExW ShowWindow LoadIconA GetClientRect IsIconic GetSystemMenu SendMessageA LoadMenuA EnableMenuItem AppendMenuA DrawIcon DefWindowProcA LoadCursorA MessageBeep EnableWindow GetParent InvalidateRect ReleaseDC GetDC LoadBitmapA GetMessageTime

gdi32

ExtSelectClipRgn DeleteDC CreateBitmap TextOutA GetMapMode GetBkColor GetTextColor GetRgnBox CreateRectRgnIndirect RectVisible PtVisible ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape CreatePen GetWindowExtEx GetViewportExtEx GetObjectA DeleteObject GetClipBox SetMapMode SetTextColor SetROP2 SetBkColor RestoreDC SaveDC GetDeviceCaps GetStockObject BitBlt CreateCompatibleDC ExtTextOutA

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA ClosePrinter OpenPrinterA

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegCloseKey

shlwapi

PathFindFileNameA PathStripToRootA PathIsUNCA PathFindExtensionA

oledlg

ord8

ole32

CoTaskMemFree CoTaskMemAlloc CLSIDFromProgID CLSIDFromString CoGetClassObject StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal OleUninitialize CoFreeUnusedLibraries OleInitialize CoRevokeClassObject OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter

oleaut32

SysAllocString OleCreateFontIndirect SystemTimeToVariantTime VariantTimeToSystemTime SafeArrayDestroy VariantCopy SysAllocStringByteLen SysFreeString SysStringLen SysAllocStringLen VariantInit VariantChangeType VariantClear

ws2_32

socket select gethostbyname htonl htons inet_addr bind WSAGetLastError accept WSASetLastError connect sendto recvfrom WSAAsyncSelect send recv listen closesocket WSACleanup WSAStartup