emotet_exe_e4_11e5de96e3f0a7dc59c530e3c84bde2fdacd665d2bf4a72b1a5f9bd12c83ffcb_2022-03-04__000143[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e4_11e5de96e3f0a7dc59c530e3c84bde2fdacd665d2bf4a72b1a5f9bd12c83ffcb_2022-03-04__000143.exe
Size 615KB
Sample220304-abgezschf8
SHA256 11e5de96e3f0a7dc59c530e3c84bde2fdacd665d2bf4a72b1a5f9bd12c83ffcb
MD5 aa1db87d60e86457c4f86f496d95f80b
SHA1 82a7ccf444cac56eccb15e178b4ce543750f28de
SHA512 3b6322000e7da4e6e6925d19e23a7e44b63ff6e8ededc94a1203cf400e9c2590fdf1a9fda9ca913328fd0ee147ba5f11b9c20485e98565dac8d872bb09065bd0
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_11e5de96e3f0a7dc59c530e3c84bde2fdacd665d2bf4a72b1a5f9bd12c83ffcb_2022-03-04__000143.exe

.dll 615KB

emotet_exe_e4_11e5de96e3f0a7dc59c530e3c84bde2fdacd665d2bf4a72b1a5f9bd12c83ffcb_2022-03-04__000143.exe

IMPHASH bb2e319682f72745317e92a26483f973
SHA256 11e5de96e3f0a7dc59c530e3c84bde2fdacd665d2bf4a72b1a5f9bd12c83ffcb
MD5 aa1db87d60e86457c4f86f496d95f80b
SHA1 82a7ccf444cac56eccb15e178b4ce543750f28de
SHA512 3b6322000e7da4e6e6925d19e23a7e44b63ff6e8ededc94a1203cf400e9c2590fdf1a9fda9ca913328fd0ee147ba5f11b9c20485e98565dac8d872bb09065bd0
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

240544

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapAlloc GetCommandLineA RaiseException VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc Sleep HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetACP IsValidCodePage HeapCreate HeapDestroy VirtualFree GetStdHandle SetHandleCount GetFileType GetStartupInfoA HeapFree GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA RtlUnwind GetTickCount GetFileTime GetFileSizeEx GetFileAttributesA FileTimeToLocalFileTime CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile WritePrivateProfileStringA FileTimeToSystemTime GetThreadLocale GetModuleHandleW GetOEMCP GetCPInfo InterlockedIncrement TlsFree LocalReAlloc TlsSetValue TlsAlloc GlobalHandle GlobalReAlloc TlsGetValue LocalAlloc GlobalFlags EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection InterlockedDecrement CloseHandle GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA InterlockedExchange lstrcmpA GetCurrentProcessId GetModuleFileNameA GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom CompareStringA GetLastError SetLastError MultiByteToWideChar lstrcmpW GetModuleHandleA GetProcAddress GetVersionExA WideCharToMultiByte LoadResource LockResource SizeofResource FindResourceA ExitProcess lstrcatA lstrlenA WinExec lstrcpyA GetWindowsDirectoryA LoadLibraryA FreeEnvironmentStringsA FreeLibrary

user32

RegisterClipboardFormatA PostThreadMessageA DestroyMenu SetWindowContextHelpId MapDialogRect GetDesktopWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog GetMessageA TranslateMessage GetActiveWindow ValidateRect PostQuitMessage GetWindowThreadProcessId EndPaint BeginPaint GetWindowDC ClientToScreen GetCursorPos WindowFromPoint IsWindowEnabled ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture SetWindowsHookExA CallNextHookEx GetClassLongA SetPropA GetPropA RemovePropA SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints GetKeyState SetMenu SetForegroundWindow IsWindowVisible UpdateWindow GetSubMenu GetMenuItemID GetMenuItemCount MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect CopyRect EnableWindow SendMessageA GetClientRect ReleaseCapture GetDlgCtrlID DefWindowProcA CallWindowProcA GetMenu GetWindowLongA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindow SetMenuItemBitmaps GetNextDlgGroupItem InvalidateRgn SetRect IsRectEmpty CopyAcceleratorTableA CharNextA CharUpperA GetClassNameA PtInRect InvalidateRect SetCapture SetCursor GetSysColor IsWindow InflateRect GetWindowRect GetDC ReleaseDC GetParent CopyIcon LoadCursorA MessageBeep SetWindowRgn GetSysColorBrush DrawStateA GetFocus TabbedTextOutA DrawTextA DrawTextExA GrayStringA RedrawWindow PostMessageA ScreenToClient ChildWindowFromPoint LoadIconA AppendMenuA GetSystemMenu GetSystemMetrics DrawIcon IsIconic CheckMenuItem EnableMenuItem GetMenuState ModifyMenuA LoadBitmapA GetMenuCheckMarkDimensions

gdi32

SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC SelectObject GetMapMode GetBkColor GetTextColor GetRgnBox GetWindowExtEx GetViewportExtEx CreateFontIndirectA SetMapMode SetBkMode RestoreDC SaveDC GetDeviceCaps CreateRectRgnIndirect SetBkColor SetTextColor GetClipBox CreateBitmap DeleteObject BitBlt Escape ExtTextOutA TextOutA RectVisible PtVisible CreateCompatibleDC CreateCompatibleBitmap Ellipse FillRgn CreateEllipticRgnIndirect CreateSolidBrush SetPixelV GetTextExtentPoint32A GetStockObject GetObjectA

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA ClosePrinter OpenPrinterA

advapi32

RegSetValueExA RegCreateKeyExA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegQueryValueExA RegOpenKeyExA RegQueryValueA RegCloseKey

shell32

ShellExecuteA

shlwapi

PathFindFileNameA PathStripToRootA PathIsUNCA PathFindExtensionA

oledlg

ord8

ole32

CoRevokeClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject OleIsCurrentClipboard CLSIDFromString CLSIDFromProgID CoTaskMemAlloc CoTaskMemFree OleFlushClipboard CoRegisterMessageFilter

oleaut32

VariantChangeType VariantInit SysAllocStringLen SysStringLen SysFreeString SysAllocStringByteLen VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime OleCreateFontIndirect SysAllocString VariantClear