emotet_exe_e4_91c3af356538ebda04d12492c0beb6df24ae786624f5e21d1dcd4407647be0a5_2022-02-24__000212[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e4_91c3af356538ebda04d12492c0beb6df24ae786624f5e21d1dcd4407647be0a5_2022-02-24__000212.exe
Size 664KB
Sample220224-ab3cfschgp
SHA256 91c3af356538ebda04d12492c0beb6df24ae786624f5e21d1dcd4407647be0a5
MD5 4f7adcceab561eb08d621b88c99b9fca
SHA1 7240833dca6d4e0c1e758736cf5c90b93504ac50
SHA512 fe2a209ccb50d1b87137123a79b5eb874678b724451819c225c5445a4097e9a8f8b05cee2f0bc9331b26d174dc4e7ee3a2c76b91956b2279e42b67a977963123
SSDEEP 12288:Z6ZLutvgrwV8RQc5W1yS0ezL9J6XKHe/vyzfANcN/kJhXx5y:qza8RQc5W1P0Q9sXKHLzflBkn
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_91c3af356538ebda04d12492c0beb6df24ae786624f5e21d1dcd4407647be0a5_2022-02-24__000212.exe

.dll 664KB

emotet_exe_e4_91c3af356538ebda04d12492c0beb6df24ae786624f5e21d1dcd4407647be0a5_2022-02-24__000212.exe

IMPHASH 5529db874583b5635436baabaebb4b71
SHA256 91c3af356538ebda04d12492c0beb6df24ae786624f5e21d1dcd4407647be0a5
MD5 4f7adcceab561eb08d621b88c99b9fca
SHA1 7240833dca6d4e0c1e758736cf5c90b93504ac50
SHA512 fe2a209ccb50d1b87137123a79b5eb874678b724451819c225c5445a4097e9a8f8b05cee2f0bc9331b26d174dc4e7ee3a2c76b91956b2279e42b67a977963123
SSDEEP 12288:Z6ZLutvgrwV8RQc5W1yS0ezL9J6XKHe/vyzfANcN/kJhXx5y:qza8RQc5W1P0Q9sXKHLzflBkn
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

250287

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesA GetFileTime WritePrivateProfileStringA GetCurrentDirectoryA FindResourceExA GetTickCount RtlUnwind HeapAlloc HeapFree HeapReAlloc VirtualAlloc GetSystemInfo VirtualQuery GetSystemTimeAsFileTime GetCommandLineA GetProcessHeap RaiseException SetStdHandle GetFileType ExitThread HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetOEMCP HeapDestroy HeapCreate GetStdHandle GetACP GetStringTypeA GetStringTypeW GetTimeZoneInformation SetHandleCount GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA GetCPInfo GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc VirtualProtect FileTimeToLocalFileTime FindNextFileA FileTimeToSystemTime GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA CreateEventA SetEvent InterlockedDecrement GetCurrentProcessId GetFullPathNameA FindFirstFileA FindClose DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile MoveFileA lstrcmpA GetThreadLocale InterlockedIncrement FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcmpW GetVersionExA GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv ReadDirectoryChangesW lstrlenA CompareStringW CompareStringA GetVersion MultiByteToWideChar InterlockedExchange GetModuleFileNameA GetVolumeInformationA CreateThread SetThreadPriority GetDriveTypeA GetWindowsDirectoryA GetSystemDirectoryA GetLogicalDriveStringsA GetCurrentProcess GetShortPathNameA OpenProcess ResumeThread SuspendThread GetExitCodeThread TerminateThread SetLastError GetModuleHandleA Sleep CreateProcessA WaitForSingleObject GetLastError ExitProcess FindResourceA LoadResource LockResource SizeofResource CreateFileA CloseHandle DeleteFileA LoadLibraryA GetProcAddress FreeLibrary VirtualFree WideCharToMultiByte

user32

GetNextDlgGroupItem MessageBeep RegisterClipboardFormatA SetParent GetDCEx LockWindowUpdate PostThreadMessageA PostQuitMessage EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA GetMessageA TranslateMessage ValidateRect DestroyMenu GetWindowThreadProcessId GetDesktopWindow GetActiveWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog CharNextA IsWindowEnabled SetWindowTextA IsDialogMessageA SetMenuItemBitmaps GetMenuCheckMarkDimensions EnableMenuItem CheckMenuItem RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture SetWindowsHookExA CallNextHookEx WindowFromPoint GetClassNameA SetPropA GetPropA RemovePropA GetFocus IsWindow SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints TrackPopupMenu GetKeyState SetForegroundWindow GetMenu MessageBoxA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx GetParent EqualRect DeferWindowPos PtInRect EnableWindow SendMessageA CopyRect InflateRect LoadBitmapA GetMenuItemCount GetDlgCtrlID DefWindowProcA CallWindowProcA GetWindowLongA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindow GetMenuState GetMenuStringA UnregisterClassA ReleaseCapture SetCapture InvalidateRgn IsRectEmpty CopyAcceleratorTableA GetSysColorBrush GetAsyncKeyState SetWindowContextHelpId MapDialogRect WaitMessage GetClassLongA SetRectEmpty GetMenuItemID GetSubMenu ModifyMenuA GetClientRect UpdateWindow InvalidateRect RedrawWindow SetTimer KillTimer SetCursor GetSysColor CreateWindowExA ShowWindow CreateWindowExW GetWindowRect ClipCursor SetSystemCursor ShowCursor DrawIcon LoadMenuA IsIconic ScreenToClient IsWindowVisible LoadCursorA LoadIconA GetSystemMetrics FillRect SetRect GetCursorPos LoadCursorFromFileA CopyIcon ExitWindowsEx PeekMessageA PostMessageA CharUpperA MoveWindow

gdi32

SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC CreatePatternBrush CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode PatBlt GetCharWidthA StretchDIBits CreateCompatibleBitmap GetRgnBox EnumFontFamiliesExA ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx Escape TextOutA RectVisible PtVisible GetWindowExtEx GetViewportExtEx CreateRectRgn CreateFontA SelectClipRgn IntersectClipRect ExcludeClipRect SetMapMode SetBkMode RestoreDC SaveDC ExtTextOutA GetTextColor GetBkColor CreateBitmap SetBkColor SetTextColor GetClipBox GetDeviceCaps BitBlt SelectObject GetStockObject CreateFontIndirectA DeleteObject CreateSolidBrush StretchBlt Rectangle CreateCompatibleDC GetObjectA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter OpenPrinterA DocumentPropertiesA

advapi32

RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegCloseKey RegCreateKeyA RegSetValueExA RegDeleteValueA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges RegCreateKeyExA

shell32

SHBrowseForFolderA ShellExecuteA Shell_NotifyIconA SHGetFileInfoA SHGetPathFromIDListA

shlwapi

PathIsUNCA PathFindExtensionA PathStripToRootA PathFindFileNameA

oledlg

ord8

ole32

CLSIDFromProgID CLSIDFromString CoTaskMemFree CoTaskMemAlloc CoGetClassObject StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal OleUninitialize CoFreeUnusedLibraries OleInitialize CoRevokeClassObject OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter

oleaut32

VariantChangeType SysFreeString SysStringLen SysAllocString SysAllocStringByteLen VariantInit SysAllocStringLen OleCreateFontIndirect VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime VariantClear

ws2_32

accept select htonl WSAGetLastError WSASetLastError connect sendto recvfrom WSACleanup send socket gethostbyname inet_addr setsockopt htons bind WSAIoctl recv ntohs inet_ntoa closesocket WSAStartup WSAAsyncSelect

psapi

EnumProcessModules EnumProcesses GetModuleFileNameExA