emotet_exe_e4_2c08988e554dc91e11263752510b5c88eb89e97beaddfd7140780ef77daf5ca6_2022-02-25__000016[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e4_2c08988e554dc91e11263752510b5c88eb89e97beaddfd7140780ef77daf5ca6_2022-02-25__000016.exe
Size 1.0MB
Sample220225-aazvyafbfp
SHA256 2c08988e554dc91e11263752510b5c88eb89e97beaddfd7140780ef77daf5ca6
MD5 4dec83849fc0361a518e2912432b01aa
SHA1 148e7002c9ea894b9e7c2a9c43c7f6dd9b49643c
SHA512 2fe5ed613ee41a5534d0c71b72fc966d694584d335cd4fd0a580f24dab2efa28b0f7fcedff48ab7794a5dd3d28bc5fe40a98f2bf5f9138b0267c4a9c8268a05f
SSDEEP 24576:6iIiGcU0Jmk092WkcEYNFs+u6VOe528JO6PC:6iRGcUY0UvDYNFtuK5Ro6
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_2c08988e554dc91e11263752510b5c88eb89e97beaddfd7140780ef77daf5ca6_2022-02-25__000016.exe

.dll 1.0MB

emotet_exe_e4_2c08988e554dc91e11263752510b5c88eb89e97beaddfd7140780ef77daf5ca6_2022-02-25__000016.exe

IMPHASH fb7aa40890c33e7cab21ed01eb149bf8
SHA256 2c08988e554dc91e11263752510b5c88eb89e97beaddfd7140780ef77daf5ca6
MD5 4dec83849fc0361a518e2912432b01aa
SHA1 148e7002c9ea894b9e7c2a9c43c7f6dd9b49643c
SHA512 2fe5ed613ee41a5534d0c71b72fc966d694584d335cd4fd0a580f24dab2efa28b0f7fcedff48ab7794a5dd3d28bc5fe40a98f2bf5f9138b0267c4a9c8268a05f
SSDEEP 24576:6iIiGcU0Jmk092WkcEYNFs+u6VOe528JO6PC:6iRGcUY0UvDYNFtuK5Ro6
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

117652

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW UnhandledExceptionFilter QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetFileType IsBadReadPtr IsBadCodePtr GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage SetConsoleCtrlHandler SetStdHandle GetLocaleInfoW SetEnvironmentVariableA GetStdHandle SetHandleCount IsBadWritePtr FatalAppExitA VirtualFree HeapCreate ExitProcess HeapDestroy HeapSize HeapReAlloc CreateThread ExitThread TerminateProcess GetCommandLineA VirtualQuery GetSystemInfo VirtualAlloc VirtualProtect HeapAlloc HeapFree RtlUnwind LocalLock LocalUnlock GetProfileIntA lstrcpynW GetTickCount SetErrorMode GetCurrentDirectoryA SetFileAttributesA SystemTimeToFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime FileTimeToSystemTime GetShortPathNameA CreateFileA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetOEMCP GetCPInfo InterlockedIncrement GlobalFlags TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc DeleteCriticalSection InitializeCriticalSection RaiseException InterlockedDecrement CopyFileA GlobalSize FormatMessageA LocalFree SetLastError GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetCurrentThread GlobalAlloc GetModuleFileNameA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA lstrcmpA GlobalLock GlobalUnlock GlobalFree GetDiskFreeSpaceA GetFullPathNameA GetTempFileNameA GetFileTime SetFileTime GetFileAttributesA SizeofResource FindResourceA LoadResource LockResource FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom LoadLibraryA FreeLibrary lstrcatA lstrcmpW lstrcpynA GetModuleHandleA GetProcAddress MulDiv GetStringTypeExW GetStringTypeExA GetEnvironmentVariableW GetEnvironmentVariableA CompareStringW CompareStringA lstrlenA lstrcmpiW lstrlenW lstrcmpiA GetVersion GetLastError WideCharToMultiByte MultiByteToWideChar GetVersionExA GetThreadLocale GetLocaleInfoA GetACP InterlockedExchange GetTimeZoneInformation

user32

GetWindowThreadProcessId WaitMessage SendNotifyMessageA WindowFromDC InSendMessage MessageBeep GetNextDlgGroupItem InvalidateRgn CopyAcceleratorTableA CharNextA DestroyIcon GetDialogBaseUnits GetMenuItemInfoA GetSysColorBrush GetMenuStringA InsertMenuA RemoveMenu SetParent GetSystemMenu AppendMenuA DeleteMenu SetCursorPos RedrawWindow InflateRect IsZoomed EndPaint BeginPaint GetWindowDC DrawTextExA DrawTextA TabbedTextOutA LoadMenuA DestroyMenu UnpackDDElParam ReuseDDElParam LoadAcceleratorsA InsertMenuItemA CreatePopupMenu SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorA GetDC ReleaseDC DestroyCursor SetRect SetWindowContextHelpId MapDialogRect GetMessageA TranslateMessage ValidateRect ShowOwnedPopups PostQuitMessage GetDesktopWindow GetActiveWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog wsprintfA SetMenuItemBitmaps ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA ScrollWindowEx IsWindowEnabled ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA IsClipboardFormatAvailable CheckRadioButton CheckDlgButton WinHelpA GetCapture CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA SendDlgItemMessageA GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos LoadIconA PeekMessageA MapWindowPoints ScrollWindow MessageBoxA TrackPopupMenuEx TrackPopupMenu GetKeyState EnableWindow SendMessageA UpdateWindow GetWindowRect CharLowerA CharLowerW CharUpperA CharUpperW IsChild GetFocus SetFocus IsWindow GetWindow SystemParametersInfoA SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar IsWindowVisible GetMenu PostMessageA GetSubMenu GetMenuItemID GetMenuItemCount GetSysColor ScreenToClient EqualRect RegisterClipboardFormatA LockWindowUpdate GetDCEx UnionRect MapVirtualKeyA DeferWindowPos GetScrollInfo SetScrollInfo GetClassInfoA RegisterClassA UnregisterClassA SetWindowPlacement DefWindowProcA CallWindowProcA GetWindowLongA SetWindowLongA SetWindowPos GetKeyNameTextA WindowFromPoint GetTabbedTextExtentA PostThreadMessageA GetDlgItemInt CreateMenu FindWindowA RegisterWindowMessageA IsRectEmpty OffsetRect FillRect DrawIcon SetWindowRgn GetClientRect ClientToScreen InvalidateRect SetTimer KillTimer SetCapture GetParent PtInRect LoadCursorA GetSystemMetrics AdjustWindowRectEx SetCursor ReleaseCapture GetCursorPos IsIconic GetDlgCtrlID CopyRect GetWindowPlacement IntersectRect GrayStringA

gdi32

ScaleWindowExtEx GetCurrentPositionEx ArcTo PolyDraw PolylineTo PolyBezierTo ExtSelectClipRgn CreateDIBPatternBrushPt CreatePatternBrush SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile ExtCreatePen CreateSolidBrush CreateHatchBrush StretchDIBits GetCharWidthA CreateFontA GetTextMetricsA SetWindowExtEx CopyMetaFileA CreateFontIndirectA GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetNearestColor GetBkMode GetPolyFillMode GetROP2 GetStretchBltMode GetTextAlign GetTextFaceA GetWindowOrgEx SetRectRgn CombineRgn GetMapMode CreateMetaFileA CloseMetaFile DeleteMetaFile OffsetWindowOrgEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible PtVisible GetPixel BitBlt GetWindowExtEx GetViewportExtEx SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra GetTextExtentPoint32A SetPixel SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC CreateCompatibleDC CreateCompatibleBitmap CreateDCA DeleteDC EndDoc AbortDoc SetAbortProc EndPage StartPage StartDocA GetStockObject PatBlt Rectangle GetViewportOrgEx GetDeviceCaps CreatePen CreateBitmap GetObjectA SetBkColor SetTextColor GetClipBox GetDCOrgEx Ellipse LPtoDP DPtoLP CreateEllipticRgn SetTextJustification

comdlg32

ReplaceTextA GetOpenFileNameA GetSaveFileNameA PrintDlgA FindTextA GetFileTitleA CommDlgExtendedError PageSetupDlgA

winspool.drv

GetJobA OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegSetValueA GetFileSecurityA RegCloseKey RegQueryValueExA RegOpenKeyExA RegDeleteKeyA RegEnumKeyA RegOpenKeyA RegQueryValueA RegCreateKeyExA RegSetValueExA RegCreateKeyA SetFileSecurityA RegDeleteValueA

shell32

DragQueryFileA SHGetFileInfoA ExtractIconA DragFinish

comctl32

ord17 ImageList_Draw ImageList_GetImageInfo ord13 ImageList_Read ImageList_Write ord14 ImageList_Destroy ImageList_Create ImageList_LoadImageA ImageList_Merge

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

OleCreateLinkFromData OleCreateStaticFromData OleCreateFromFile OleCreateLinkToFile OleCreate OleLoad OleGetIconOfClass CreateItemMoniker CreateGenericComposite GetHGlobalFromILockBytes OleIsRunning CreateFileMoniker GetRunningObjectTable CoLockObjectExternal CoGetMalloc StgCreateDocfile StgOpenStorage StgIsStorageFile CreateOleAdviseHolder CreateDataAdviseHolder OleGetClipboard CoRegisterClassObject CoRevokeClassObject OleSetClipboard OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter OleCreateFromData OleQueryLinkFromData OleSetMenuDescriptor DoDragDrop IsAccelerator OleTranslateAccelerator OleRegGetMiscStatus OleRegEnumVerbs CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoDisconnectObject OleDuplicateData ReleaseStgMedium CoTaskMemAlloc CreateBindCtx CoTreatAsClass StringFromCLSID ReadClassStg ReadFmtUserTypeStg OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree CLSIDFromString CLSIDFromProgID OleSetContainedObject OleLockRunning CreateStreamOnHGlobal OleSaveToStream WriteClassStm OleSave OleInitialize CoFreeUnusedLibraries OleUninitialize OleRun StringFromGUID2 CoCreateInstance OleDestroyMenuDescriptor OleQueryCreateFromData OleCreateMenuDescriptor

oleaut32

VariantClear VariantChangeType VariantInit SysAllocStringLen SysFreeString SysStringLen SysAllocStringByteLen SysStringByteLen OleCreateFontIndirect SystemTimeToVariantTime SafeArrayDestroy SysAllocString SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SysReAllocStringLen VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromCy VarBstrFromDate LoadTypeLi VarDateFromStr

Name

.text

Size

640KB

Virtual Size

636KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

136KB

Virtual Size

135KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

20KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

20KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

4KB

Virtual Size

793B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

184KB

Virtual Size

182KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

52KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ