emotet_exe_e5_e4de27e84e75f2d6693f2ed52c57b9dae9ab7110df3e87a9112fa05ca4a1b92a_2022-02-24__101809[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e5_e4de27e84e75f2d6693f2ed52c57b9dae9ab7110df3e87a9112fa05ca4a1b92a_2022-02-24__101809.exe
Size 645KB
Sample220224-mcjb7aeaep
SHA256 e4de27e84e75f2d6693f2ed52c57b9dae9ab7110df3e87a9112fa05ca4a1b92a
MD5 665a77dfdf2e0874d7bee668846044e9
SHA1 1e90ad0f558f4e10135a8e8ae2774a2087afae6c
SHA512 dbe660536b02d45fcf3ec17cb3019949f555ce55aa0c3e27c8932e8aa3e8df36a71f8885e42aa8224a7f7a1217f34eec2fff3243ee4ff9182a120c2806e320bc
SSDEEP 12288:JzpSPnEifD6xu1XRiTFIy30ZKm0XJsD12m1yMu0mPVOXNZ:JzpSPdDBQTFIy3mFWJa1/cNVY
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e5_e4de27e84e75f2d6693f2ed52c57b9dae9ab7110df3e87a9112fa05ca4a1b92a_2022-02-24__101809.exe

.dll 645KB

emotet_exe_e5_e4de27e84e75f2d6693f2ed52c57b9dae9ab7110df3e87a9112fa05ca4a1b92a_2022-02-24__101809.exe

IMPHASH cca9170027b8a1c09e4e49e3efdfdd6a
SHA256 e4de27e84e75f2d6693f2ed52c57b9dae9ab7110df3e87a9112fa05ca4a1b92a
MD5 665a77dfdf2e0874d7bee668846044e9
SHA1 1e90ad0f558f4e10135a8e8ae2774a2087afae6c
SHA512 dbe660536b02d45fcf3ec17cb3019949f555ce55aa0c3e27c8932e8aa3e8df36a71f8885e42aa8224a7f7a1217f34eec2fff3243ee4ff9182a120c2806e320bc
SSDEEP 12288:JzpSPnEifD6xu1XRiTFIy30ZKm0XJsD12m1yMu0mPVOXNZ:JzpSPdDBQTFIy3mFWJa1/cNVY
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

255111

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WritePrivateProfileStringA GetCurrentDirectoryA FindResourceExA GetTickCount RtlUnwind HeapAlloc HeapFree GetSystemTimeAsFileTime GetCommandLineA RaiseException VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc SetStdHandle GetFileType ExitThread HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent VirtualFree HeapCreate HeapDestroy GetStdHandle GetFileTime IsValidCodePage GetStringTypeA GetStringTypeW GetTimeZoneInformation SetHandleCount GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA GetFileSizeEx GetFileAttributesA GetOEMCP GetCPInfo GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GetModuleHandleW VirtualProtect FileTimeToLocalFileTime FindNextFileA FileTimeToSystemTime GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA InterlockedExchange CreateEventA SetEvent InterlockedDecrement GetCurrentProcessId GetFullPathNameA FindFirstFileA FindClose DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile MoveFileA lstrcmpA GetThreadLocale InterlockedIncrement FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom CompareStringA lstrcmpW GetVersionExA GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv lstrlenA MultiByteToWideChar ReadDirectoryChangesW GetModuleFileNameA GetVolumeInformationA CreateThread SetThreadPriority GetDriveTypeA GetWindowsDirectoryA GetSystemDirectoryA GetLogicalDriveStringsA GetCurrentProcess GetShortPathNameA OpenProcess ResumeThread SuspendThread GetExitCodeThread TerminateThread SetLastError GetModuleHandleA Sleep CreateProcessA WaitForSingleObject GetLastError ExitProcess FindResourceA LoadResource LockResource SizeofResource CreateFileA CloseHandle DeleteFileA LoadLibraryA GetProcAddress FreeLibrary GetACP WideCharToMultiByte

user32

GetNextDlgGroupItem MessageBeep RegisterClipboardFormatA PostThreadMessageA GetSysColorBrush GetAsyncKeyState SetWindowContextHelpId MapDialogRect WaitMessage SetRectEmpty PostQuitMessage EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA GetMessageA TranslateMessage ValidateRect DestroyMenu GetWindowThreadProcessId GetDesktopWindow GetActiveWindow CreateDialogIndirectParamA EndDialog CharUpperA CharNextA IsWindowEnabled MoveWindow SetWindowTextA IsDialogMessageA SetMenuItemBitmaps GetMenuCheckMarkDimensions EnableMenuItem CheckMenuItem RegisterWindowMessageA SendDlgItemMessageA WinHelpA GetCapture SetWindowsHookExA CallNextHookEx GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA GetFocus IsWindow SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints TrackPopupMenu GetKeyState SetMenu SetForegroundWindow MessageBoxA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx GetParent EqualRect EnableWindow SendMessageA CopyRect InflateRect DeferWindowPos PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA GetMenu GetWindowLongA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement WindowFromPoint ReleaseCapture SetCapture InvalidateRgn IsRectEmpty IsChild CopyAcceleratorTableA LoadBitmapA GetMenuItemCount GetMenuItemID GetSubMenu ModifyMenuA GetClientRect UpdateWindow InvalidateRect RedrawWindow SetTimer KillTimer SetCursor GetSysColor CreateWindowExA ShowWindow CreateWindowExW GetWindowRect ClipCursor SetSystemCursor ShowCursor DrawIcon LoadMenuA IsIconic ScreenToClient IsWindowVisible LoadCursorA LoadIconA GetSystemMetrics FillRect SetRect GetCursorPos LoadCursorFromFileA CopyIcon ExitWindowsEx PeekMessageA PostMessageA GetWindow GetMenuState GetMenuStringA GetNextDlgTabItem

gdi32

ExtSelectClipRgn DeleteDC CreateRectRgnIndirect GetMapMode GetCharWidthA StretchDIBits CreateCompatibleBitmap GetRgnBox EnumFontFamiliesExA SetWindowExtEx ScaleWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx Escape TextOutA RectVisible PtVisible GetWindowExtEx GetViewportExtEx CreateFontA IntersectClipRect ExcludeClipRect SetMapMode SetBkMode RestoreDC SaveDC ExtTextOutA GetTextColor GetBkColor CreateBitmap SetBkColor SetTextColor GetClipBox GetDeviceCaps BitBlt SelectObject GetStockObject CreateFontIndirectA DeleteObject CreateSolidBrush StretchBlt Rectangle CreateCompatibleDC GetObjectA

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA ClosePrinter OpenPrinterA

advapi32

RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegOpenKeyA RegQueryValueExA RegCloseKey RegCreateKeyA RegSetValueExA RegDeleteValueA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges RegCreateKeyExA

shell32

SHBrowseForFolderA ShellExecuteA Shell_NotifyIconA SHGetFileInfoA SHGetPathFromIDListA

shlwapi

PathIsUNCA PathRemoveFileSpecW PathFindExtensionA PathStripToRootA PathFindFileNameA

oledlg

ord8

ole32

CoTaskMemFree CLSIDFromString OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter CoTaskMemAlloc CoUninitialize CoInitializeEx CoGetClassObject StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal OleUninitialize CoFreeUnusedLibraries OleInitialize CoRevokeClassObject CoCreateInstance CLSIDFromProgID

oleaut32

VariantChangeType SysFreeString SysStringLen SysAllocString SysAllocStringByteLen VariantInit SysAllocStringLen OleCreateFontIndirect VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime VariantClear

ws2_32

WSACleanup accept select htonl WSAGetLastError WSASetLastError connect sendto recvfrom WSAAsyncSelect send socket gethostbyname inet_addr setsockopt htons bind WSAIoctl recv ntohs inet_ntoa closesocket WSAStartup

psapi

EnumProcessModules EnumProcesses GetModuleFileNameExA