emotet_exe_e5_1c3b98c99e9e3c868a4d139f1c8f1ec3e912535aa77f8266f07bddea00cd6ac6_2022-02-23__185412[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e5_1c3b98c99e9e3c868a4d139f1c8f1ec3e912535aa77f8266f07bddea00cd6ac6_2022-02-23__185412.exe
Size 572KB
Sample220223-xkswpscdfq
SHA256 1c3b98c99e9e3c868a4d139f1c8f1ec3e912535aa77f8266f07bddea00cd6ac6
MD5 a6e083aefecf8a7369e4921ab7cee116
SHA1 df1a993001a95ac8b39277ba95e6f7b5cb27e70c
SHA512 006be89ad2511f0d845c862782ef861b13bec464c02ee0df1d00a69354ef8168b06b84f77a8a7bd9b321c29a8892a78bb7470923b74a97fcc393a8676a4469f5
SSDEEP 12288:Djhn0h2iub22/tqdbP0EJRZvtkNUqqa/6COkep030t:Hh0hDubBtu4ElKeja/l+
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e5_1c3b98c99e9e3c868a4d139f1c8f1ec3e912535aa77f8266f07bddea00cd6ac6_2022-02-23__185412.exe

.dll 572KB

emotet_exe_e5_1c3b98c99e9e3c868a4d139f1c8f1ec3e912535aa77f8266f07bddea00cd6ac6_2022-02-23__185412.exe

IMPHASH eab923583aa648aa09e329638e8354af
SHA256 1c3b98c99e9e3c868a4d139f1c8f1ec3e912535aa77f8266f07bddea00cd6ac6
MD5 a6e083aefecf8a7369e4921ab7cee116
SHA1 df1a993001a95ac8b39277ba95e6f7b5cb27e70c
SHA512 006be89ad2511f0d845c862782ef861b13bec464c02ee0df1d00a69354ef8168b06b84f77a8a7bd9b321c29a8892a78bb7470923b74a97fcc393a8676a4469f5
SSDEEP 12288:Djhn0h2iub22/tqdbP0EJRZvtkNUqqa/6COkep030t:Hh0hDubBtu4ElKeja/l+
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

134652

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapFree VirtualAlloc GetSystemInfo VirtualQuery GetSystemTimeAsFileTime GetCommandLineA HeapReAlloc SetStdHandle GetFileType ExitThread TerminateProcess HeapSize HeapDestroy HeapCreate VirtualFree IsBadWritePtr LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeZoneInformation HeapAlloc GetStdHandle GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW UnhandledExceptionFilter QueryPerformanceCounter GetCurrentProcessId SetUnhandledExceptionFilter IsBadReadPtr IsBadCodePtr SetEnvironmentVariableA InterlockedExchange RtlUnwind GetTickCount FindResourceExA GetCurrentDirectoryA WritePrivateProfileStringA GetFileTime GetFileAttributesA GetOEMCP GetCPInfo GlobalFlags TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc InterlockedIncrement VirtualProtect FileTimeToLocalFileTime FindNextFileA FileTimeToSystemTime GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA CreateEventA SetEvent InterlockedDecrement GetFullPathNameA FindFirstFileA FindClose lstrcpyA DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile MoveFileA lstrcmpA DeleteCriticalSection InitializeCriticalSection RaiseException FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcatA lstrcmpW GetModuleHandleA SetLastError GlobalFree MulDiv GlobalAlloc GlobalLock GlobalUnlock FormatMessageA lstrcpynA LocalFree ReadDirectoryChangesW CompareStringW CompareStringA lstrlenA lstrcmpiA GetVersion MultiByteToWideChar GetModuleFileNameA GetVolumeInformationA CreateThread SetThreadPriority GetDriveTypeA GetWindowsDirectoryA GetSystemDirectoryA GetLogicalDriveStringsA GetCurrentProcess GetShortPathNameA OpenProcess ResumeThread SuspendThread GetExitCodeThread TerminateThread Sleep CreateProcessA WaitForSingleObject GetLastError ExitProcess FindResourceA LoadResource LockResource SizeofResource CreateFileA CloseHandle DeleteFileA LoadLibraryA GetProcAddress FreeLibrary WideCharToMultiByte GetVersionExA GetThreadLocale GetLocaleInfoA GetACP SetHandleCount

user32

PostThreadMessageA ReleaseCapture WindowFromPoint SetCapture CharNextA GetSysColorBrush GetAsyncKeyState SetWindowContextHelpId MapDialogRect WaitMessage SetRectEmpty PostQuitMessage EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA GetMessageA TranslateMessage ValidateRect DestroyMenu GetDesktopWindow GetActiveWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog wsprintfA SetMenuItemBitmaps EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions IsWindowEnabled MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA WinHelpA GetCapture SetWindowsHookExA CallNextHookEx GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA SetParent SendDlgItemMessageA GetFocus IsWindow SetFocus IsChild GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints MessageBoxA TrackPopupMenu GetKeyState EnableWindow SendMessageA CopyRect InflateRect LoadBitmapA GetMenuItemCount GetMenuItemID GetSubMenu ModifyMenuA GetClientRect UpdateWindow InvalidateRect RedrawWindow SetTimer SetForegroundWindow GetMenu AdjustWindowRectEx GetParent EqualRect DeferWindowPos GetClassInfoA RegisterClassA UnregisterClassA GetDlgCtrlID RegisterClipboardFormatA LockWindowUpdate GetDCEx MessageBeep GetNextDlgGroupItem DefWindowProcA CallWindowProcA GetWindowLongA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement PtInRect GetWindow GetMenuState GetMenuStringA InvalidateRgn CopyAcceleratorTableA IsRectEmpty RemovePropA KillTimer SetCursor GetSysColor CreateWindowExA ShowWindow CreateWindowExW GetWindowRect ClipCursor SetSystemCursor ShowCursor DrawIcon LoadMenuA IsIconic ScreenToClient IsWindowVisible LoadCursorA LoadIconA GetSystemMetrics FillRect SetRect GetCursorPos LoadCursorFromFileA CopyIcon ExitWindowsEx PeekMessageA PostMessageA CharUpperA TabbedTextOutA

gdi32

CombineRgn GetMapMode PatBlt StretchDIBits CreateCompatibleBitmap GetCharWidthA GetBkColor SetRectRgn GetRgnBox EnumFontFamiliesExA CreateRectRgnIndirect CreatePatternBrush DeleteDC ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx Escape TextOutA RectVisible PtVisible GetTextColor CreateFontA GetViewportExtEx CreateRectRgn SelectClipRgn IntersectClipRect ExcludeClipRect SetMapMode SetBkMode RestoreDC SaveDC ExtTextOutA CreateBitmap SetBkColor SetTextColor GetClipBox GetDeviceCaps BitBlt SelectObject GetStockObject CreateFontIndirectA DeleteObject CreateSolidBrush StretchBlt Rectangle CreateCompatibleDC GetObjectA GetWindowExtEx

comdlg32

GetFileTitleA GetSaveFileNameA GetOpenFileNameA

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

LookupPrivilegeValueA OpenProcessToken RegDeleteValueA RegSetValueExA RegCreateKeyA RegCloseKey RegOpenKeyA RegQueryValueExA RegOpenKeyExA RegDeleteKeyA RegEnumKeyA RegQueryValueA RegCreateKeyExA AdjustTokenPrivileges

shell32

SHBrowseForFolderA ShellExecuteA Shell_NotifyIconA SHGetFileInfoA SHGetPathFromIDListA

comctl32

ImageList_ReplaceIcon ord17 ImageList_Destroy ImageList_Create PropertySheetA DestroyPropertySheetPage CreatePropertySheetPageA

shlwapi

PathIsUNCA PathFindExtensionA PathStripToRootA PathFindFileNameA

oledlg

ord8

ole32

CoRevokeClassObject OleFlushClipboard CoRegisterMessageFilter CLSIDFromProgID CLSIDFromString CoTaskMemFree CoTaskMemAlloc CoGetClassObject StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal OleUninitialize CoFreeUnusedLibraries OleInitialize OleIsCurrentClipboard

oleaut32

VariantClear VariantChangeType SysFreeString SysAllocString SysStringLen SysAllocStringByteLen VariantInit SysAllocStringLen VariantCopy SafeArrayDestroy SystemTimeToVariantTime OleCreateFontIndirect

ws2_32

recvfrom WSAStartup WSACleanup accept select htonl WSAGetLastError WSASetLastError connect sendto closesocket WSAAsyncSelect send socket gethostbyname inet_addr setsockopt htons bind WSAIoctl recv ntohs inet_ntoa

psapi

GetModuleFileNameExA EnumProcessModules EnumProcesses