emotet_exe_e4_a43cd7065dd54817412ae15166bc384bd14d768a388fd95fcd9eacc6ac4966ae_2022-02-26__000232[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e4_a43cd7065dd54817412ae15166bc384bd14d768a388fd95fcd9eacc6ac4966ae_2022-02-26__000232.exe
Size 932KB
Sample220226-ab2e6aafer
SHA256 a43cd7065dd54817412ae15166bc384bd14d768a388fd95fcd9eacc6ac4966ae
MD5 3a254df431d7511fb5be65e715c07dc3
SHA1 3050e03f6ebe90e399d1983e4fe775cfeb5c5237
SHA512 a71a4e162fc26f1f1acda2fbcbf6c9d0e0f09939c2bfdcd37fdc5647f5ac2adf037d878d1fcd1f40a5f56daea108f7324cb3eb2c6b2414beacf6782a1280c910
SSDEEP 12288:ryS+zt4q0JSXaJBosLwlmZz7kg763EXnv6n21wqXUZ7aiGJ3jMM:o4qUAaJxLZzIg760fi21wqXZia3j
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_a43cd7065dd54817412ae15166bc384bd14d768a388fd95fcd9eacc6ac4966ae_2022-02-26__000232.exe

.dll 932KB

emotet_exe_e4_a43cd7065dd54817412ae15166bc384bd14d768a388fd95fcd9eacc6ac4966ae_2022-02-26__000232.exe

IMPHASH 517064f74bf7f14cec170e0f6bcbfb6f
SHA256 a43cd7065dd54817412ae15166bc384bd14d768a388fd95fcd9eacc6ac4966ae
MD5 3a254df431d7511fb5be65e715c07dc3
SHA1 3050e03f6ebe90e399d1983e4fe775cfeb5c5237
SHA512 a71a4e162fc26f1f1acda2fbcbf6c9d0e0f09939c2bfdcd37fdc5647f5ac2adf037d878d1fcd1f40a5f56daea108f7324cb3eb2c6b2414beacf6782a1280c910
SSDEEP 12288:ryS+zt4q0JSXaJBosLwlmZz7kg763EXnv6n21wqXUZ7aiGJ3jMM:o4qUAaJxLZzIg760fi21wqXZia3j
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

141828

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualQuery RtlUnwind GetSystemTimeAsFileTime GetTimeFormatA GetDateFormatA GetCommandLineA HeapReAlloc TerminateProcess ExitThread CreateThread SetStdHandle GetFileType HeapSize FatalAppExitA HeapDestroy HeapCreate VirtualFree IsBadWritePtr GetTimeZoneInformation SetHandleCount GetStdHandle GetSystemInfo FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW UnhandledExceptionFilter QueryPerformanceCounter GetCurrentProcessId SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW IsBadReadPtr IsBadCodePtr GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage SetConsoleCtrlHandler SetEnvironmentVariableA GetLocaleInfoW VirtualAlloc VirtualProtect HeapFree HeapAlloc GetDiskFreeSpaceA GetTempFileNameA LocalLock LocalUnlock GetTickCount SetErrorMode GetFileTime GetFileAttributesA SetFileAttributesA SetFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime GetShortPathNameA CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetCurrentDirectoryA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA GetOEMCP GetCPInfo GlobalFlags SystemTimeToFileTime FileTimeToSystemTime TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc InterlockedIncrement DeleteCriticalSection InitializeCriticalSection RaiseException InterlockedDecrement CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetCurrentThread lstrcmpA GetModuleFileNameA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom FreeLibrary lstrcatA lstrcmpW GetModuleHandleA SetLastError GlobalFree CopyFileA MulDiv GlobalSize GlobalAlloc GlobalLock GlobalUnlock FormatMessageA lstrcpynA LocalFree CreateDirectoryA ExitProcess LoadLibraryA GetProcAddress GetStringTypeExW GetStringTypeExA GetEnvironmentVariableW GetEnvironmentVariableA CompareStringW CompareStringA lstrlenA lstrcmpiW lstrlenW lstrcmpiA GetVersion FindResourceA LoadResource LockResource SizeofResource GetLastError WideCharToMultiByte MultiByteToWideChar GetVersionExA GetThreadLocale GetLocaleInfoA GetACP GetStartupInfoA InterlockedExchange

user32

RegisterClipboardFormatA GetKeyNameTextA MapVirtualKeyA UnionRect PostThreadMessageA IsClipboardFormatAvailable GetTabbedTextExtentA GetDCEx LockWindowUpdate SetParent InvalidateRgn CopyAcceleratorTableA SetRect IsRectEmpty CharNextA DestroyIcon DeleteMenu WaitMessage GetWindowThreadProcessId ReleaseCapture WindowFromPoint SetCapture GetDialogBaseUnits GetSysColorBrush wsprintfA DestroyMenu GetMenuItemInfoA InflateRect SetWindowContextHelpId MapDialogRect GetMessageA TranslateMessage GetCursorPos ValidateRect ShowOwnedPopups SetCursor PostQuitMessage GetDesktopWindow GetActiveWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog SetMenuItemBitmaps ModifyMenuA EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions ScrollWindowEx IsWindowEnabled ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA FillRect LoadMenuA WinHelpA GetCapture CreateWindowExA CallNextHookEx GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA SendDlgItemMessageA GetFocus IsWindow SetFocus IsChild GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints ScrollWindow MessageBoxA TrackPopupMenuEx TrackPopupMenu GetKeyState SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar IsWindowVisible GetMenu AdjustWindowRectEx GetParent ScreenToClient EqualRect DeferWindowPos GetScrollInfo SetScrollInfo GetClassInfoA RegisterClassA UnregisterClassA SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA GetWindowLongA SetWindowLongA UnpackDDElParam ReuseDDElParam LoadAcceleratorsA InsertMenuItemA CreatePopupMenu SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement CopyRect PtInRect GetWindow GetMenuState GetMenuStringA GetMenuItemID InsertMenuA SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorA RegisterWindowMessageA GetNextDlgGroupItem GetMenuItemCount GetSubMenu RemoveMenu LoadCursorA UpdateWindow LoadBitmapA MessageBeep GetSystemMetrics LoadIconA GetClientRect IsIconic GetSystemMenu SendMessageA AppendMenuA DrawIcon GetWindowRect GetSysColor EnableWindow KillTimer SetTimer InvalidateRect PostMessageA CharUpperW CharUpperA CharLowerW CharLowerA SetWindowsHookExA

gdi32

PlayMetaFile CreatePen ExtCreatePen CreateHatchBrush CreateFontIndirectA GetTextExtentPoint32A CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode PatBlt DPtoLP GetTextMetricsA GetBkColor GetTextColor GetRgnBox CreateCompatibleBitmap StretchDIBits GetCharWidthA EnumMetaFile EndPage SetAbortProc AbortDoc EndDoc RectVisible PtVisible StartDocA GetPixel GetWindowExtEx GetViewportExtEx SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection SetMapperFlags GetObjectType PlayMetaFileRecord TextOutA SelectPalette GetStockObject CreateBitmap CreatePatternBrush CreateDIBPatternBrushPt DeleteDC ExtSelectClipRgn PolyBezierTo PolylineTo PolyDraw ArcTo GetCurrentPositionEx ScaleWindowExtEx SetWindowExtEx OffsetWindowOrgEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape StartPage CreateSolidBrush SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC SetBkColor SetTextColor GetClipBox GetDCOrgEx CreateDCA CopyMetaFileA GetDeviceCaps BitBlt CreateCompatibleDC GetObjectA CreateFontA ExtTextOutA

comdlg32

ReplaceTextA PrintDlgA PageSetupDlgA FindTextA GetOpenFileNameA CommDlgExtendedError GetFileTitleA GetSaveFileNameA

winspool.drv

ClosePrinter GetJobA OpenPrinterA DocumentPropertiesA

advapi32

SetFileSecurityA RegSetValueA RegOpenKeyA RegQueryValueExA RegOpenKeyExA RegDeleteKeyA RegEnumKeyA RegQueryValueA RegCreateKeyExA RegSetValueExA RegDeleteValueA GetFileSecurityA RegCloseKey RegCreateKeyA

shell32

SHGetFileInfoA DragFinish DragQueryFileA ExtractIconA

comctl32

ord17 ImageList_Draw ImageList_GetImageInfo ord13 ImageList_Read ImageList_Write ord14 ImageList_Destroy ImageList_Create ImageList_LoadImageA ImageList_Merge

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

StringFromGUID2 CoCreateInstance CoDisconnectObject CLSIDFromString CLSIDFromProgID OleDuplicateData ReleaseStgMedium CoTaskMemAlloc CoGetClassObject CoTreatAsClass StringFromCLSID ReadClassStg ReadFmtUserTypeStg OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal OleRun OleUninitialize CoFreeUnusedLibraries CreateStreamOnHGlobal CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard OleSetClipboard CoRevokeClassObject CoRegisterClassObject CreateBindCtx OleInitialize

oleaut32

LoadTypeLi OleCreateFontIndirect VarBstrFromDate VarBstrFromCy VarCyFromStr VarDecFromStr VarBstrFromDec VarDateFromStr SysReAllocStringLen SysAllocString SystemTimeToVariantTime VariantTimeToSystemTime SafeArrayDestroyDescriptor SafeArrayDestroyData SafeArrayDestroy SafeArrayUnlock SafeArrayLock SafeArrayPutElement SafeArrayPtrOfIndex SafeArrayGetElement SafeArrayCopy SafeArrayAllocDescriptor SafeArrayAllocData VariantCopy SafeArrayRedim SafeArrayCreate SafeArrayGetDim SafeArrayGetElemsize SafeArrayGetLBound SafeArrayGetUBound SafeArrayAccessData SafeArrayUnaccessData SysAllocStringLen VariantInit VariantChangeType VariantClear SysStringByteLen SysAllocStringByteLen SysStringLen SysFreeString

winmm

PlaySoundA

Name

.text

Size

556KB

Virtual Size

554KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

112KB

Virtual Size

111KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

20KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

20KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

4KB

Virtual Size

793B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

176KB

Virtual Size

173KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ