emotet_exe_e4_f7fa1bdfb49ed6c92c4996393acaa0a5744863ea8a6583be71ef4acf4b5d6e92_2022-02-26__133529[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e4_f7fa1bdfb49ed6c92c4996393acaa0a5744863ea8a6583be71ef4acf4b5d6e92_2022-02-26__133529.exe
Size 1024KB
Sample220226-qv874sccdk
SHA256 f7fa1bdfb49ed6c92c4996393acaa0a5744863ea8a6583be71ef4acf4b5d6e92
MD5 1131feaf356865968f74c0b00e53b7b1
SHA1 6d335037d7e022de3c79b1f41cd0c9e38516402b
SHA512 ce2aca8ea001f98752c40fa37e6b4244459b411445a6a70122054f996869dc095d7ca0ca5abab9fc30aaac27c1e9057895f7c54ba17f854306cdf99ae4f02446
SSDEEP 12288:lVHxC/pAfc4onhlKVXlcNCkzNk7/h8q4rpDfADWyKvQ:TRnGnhlKVXlpkq7/YcDWyB
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_f7fa1bdfb49ed6c92c4996393acaa0a5744863ea8a6583be71ef4acf4b5d6e92_2022-02-26__133529.exe

.dll 1024KB

emotet_exe_e4_f7fa1bdfb49ed6c92c4996393acaa0a5744863ea8a6583be71ef4acf4b5d6e92_2022-02-26__133529.exe

IMPHASH 8410d8aecb7e07722a55d18b11080925
SHA256 f7fa1bdfb49ed6c92c4996393acaa0a5744863ea8a6583be71ef4acf4b5d6e92
MD5 1131feaf356865968f74c0b00e53b7b1
SHA1 6d335037d7e022de3c79b1f41cd0c9e38516402b
SHA512 ce2aca8ea001f98752c40fa37e6b4244459b411445a6a70122054f996869dc095d7ca0ca5abab9fc30aaac27c1e9057895f7c54ba17f854306cdf99ae4f02446
SSDEEP 12288:lVHxC/pAfc4onhlKVXlcNCkzNk7/h8q4rpDfADWyKvQ:TRnGnhlKVXlpkq7/YcDWyB
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

335845

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileAttributesA GetFileAttributesA GetFileTime SetErrorMode GetTickCount HeapAlloc HeapFree HeapReAlloc VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery RtlUnwind GetSystemTimeAsFileTime GetTimeFormatA GetDateFormatA GetCommandLineA GetProcessHeap RaiseException ExitThread CreateThread SetStdHandle GetFileType HeapSize FatalAppExitA VirtualFree HeapDestroy HeapCreate GetStdHandle SetFileTime UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep GetACP GetTimeZoneInformation SetHandleCount GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter SetConsoleCtrlHandler GetConsoleCP GetConsoleMode GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage GetLocaleInfoW WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA LocalFileTimeToFileTime FileTimeToLocalFileTime CreateFileA GetShortPathNameA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetCurrentDirectoryA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA GetOEMCP GetCPInfo GlobalFlags SystemTimeToFileTime FileTimeToSystemTime GetThreadLocale GetAtomNameA InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedDecrement GetModuleFileNameW GetCurrentProcessId CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetCurrentThread ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA lstrcmpA FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom FreeLibrary lstrcmpW GetVersionExA GetModuleHandleA GlobalFree CopyFileA GlobalSize GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv SetLastError CreateDirectoryA ExitProcess LoadLibraryA GetProcAddress GetStringTypeExW GetStringTypeExA GetEnvironmentVariableW GetEnvironmentVariableA lstrlenA lstrcmpiW lstrcmpiA CompareStringW CompareStringA lstrlenW GetVersion FindResourceA LoadResource LockResource SizeofResource GetLastError WideCharToMultiByte MultiByteToWideChar TerminateProcess InterlockedExchange

user32

IsRectEmpty SetRect InvalidateRgn GetNextDlgGroupItem UnregisterClassA TranslateAcceleratorA SetMenu BringWindowToTop SetRectEmpty CreatePopupMenu InsertMenuItemA LoadAcceleratorsA LoadMenuA ReuseDDElParam UnpackDDElParam RegisterClipboardFormatA GetKeyNameTextA MapVirtualKeyA SetParent UnionRect PostThreadMessageA GetDCEx LockWindowUpdate GetMenuItemInfoA InflateRect SetWindowContextHelpId MapDialogRect GetWindowThreadProcessId ShowOwnedPopups SetCursor GetMessageA TranslateMessage GetCursorPos ValidateRect PostQuitMessage GetDesktopWindow GetActiveWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog ScrollWindowEx IsWindowEnabled ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton SetMenuItemBitmaps GetMenuCheckMarkDimensions ModifyMenuA EnableMenuItem CheckMenuItem RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture SetWindowsHookExA CallNextHookEx CopyAcceleratorTableA GetClassNameA SetPropA GetPropA RemovePropA GetFocus IsWindow SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints ScrollWindow TrackPopupMenuEx TrackPopupMenu GetKeyState SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar IsWindowVisible GetMenu MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx GetParent EqualRect DeferWindowPos CopyRect GetScrollInfo SetScrollInfo PtInRect SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA GetWindowLongA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindow EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen ScreenToClient GrayStringA CharNextA DestroyIcon WaitMessage ReleaseCapture WindowFromPoint SetCapture DeleteMenu GetDialogBaseUnits GetSysColorBrush GetClassLongA DestroyMenu DrawTextExA DrawTextA TabbedTextOutA FillRect GetMenuState GetMenuStringA GetMenuItemID InsertMenuA GetMenuItemCount GetSubMenu RemoveMenu LoadCursorA UpdateWindow LoadBitmapA MessageBeep GetSystemMetrics LoadIconA GetClientRect IsIconic GetSystemMenu SendMessageA AppendMenuA DrawIcon GetWindowRect GetSysColor EnableWindow KillTimer SetTimer InvalidateRect PostMessageA CharUpperW CharUpperA CharLowerW CharLowerA GetDlgItem

gdi32

GetCurrentPositionEx ArcTo PolyDraw PtVisible PolylineTo PolyBezierTo ExtSelectClipRgn DeleteDC CreateDIBPatternBrushPt CreatePatternBrush CreateBitmap GetStockObject SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile CreatePen ExtCreatePen CreateHatchBrush GetDCOrgEx ScaleWindowExtEx GetTextExtentPoint32A CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode PatBlt DPtoLP GetTextMetricsA GetBkColor GetTextColor GetRgnBox CreateCompatibleBitmap GetCharWidthA StretchDIBits StartDocA GetPixel GetWindowExtEx GetViewportExtEx SelectClipPath CreateRectRgn SetWindowExtEx OffsetWindowOrgEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA CreateFontIndirectA CreateSolidBrush GetClipRgn SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect GetClipBox SetMapMode ModifyWorldTransform SetWorldTransform SetGraphicsMode SetTextColor SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode SetBkColor RestoreDC SaveDC CreateDCA CopyMetaFileA GetDeviceCaps BitBlt CreateCompatibleDC GetObjectA CreateFontA RectVisible

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegDeleteValueA RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegSetValueA RegCloseKey RegCreateKeyA

shell32

SHGetFileInfoA DragFinish DragQueryFileA ExtractIconA

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize OleRun CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject StringFromGUID2 CoCreateInstance CoDisconnectObject CLSIDFromString CoRegisterClassObject OleDuplicateData CoTaskMemAlloc ReleaseStgMedium CreateBindCtx CoTreatAsClass StringFromCLSID ReadClassStg ReadFmtUserTypeStg OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree CoRevokeClassObject OleSetClipboard OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter CreateStreamOnHGlobal CLSIDFromProgID

oleaut32

LoadTypeLi SysAllocString OleCreateFontIndirect VarBstrFromDate VarCyFromStr VarDecFromStr VarBstrFromDec VarBstrFromCy VarDateFromStr SysReAllocStringLen SystemTimeToVariantTime VariantTimeToSystemTime SafeArrayDestroyDescriptor SafeArrayDestroyData SafeArrayDestroy SafeArrayUnlock SafeArrayLock SafeArrayPutElement SafeArrayPtrOfIndex SafeArrayGetElement SafeArrayCopy SafeArrayAllocDescriptor SafeArrayAllocData VariantCopy SafeArrayRedim SafeArrayCreate SafeArrayGetDim SafeArrayGetElemsize SafeArrayGetLBound SafeArrayGetUBound SafeArrayAccessData SafeArrayUnaccessData SysAllocStringLen VariantInit VariantChangeType VariantClear SysStringByteLen SysAllocStringByteLen SysFreeString SysStringLen

winmm

PlaySoundA

Name

.text

Size

632KB

Virtual Size

630KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

132KB

Virtual Size

130KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

4KB

Virtual Size

793B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

176KB

Virtual Size

175KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

44KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ