emotet_exe_e5_0156ec023f2738166115f3c0601e2d1b82212033f4ed342e65d5f1e9d94bde2a_2022-03-04__000304[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e5_0156ec023f2738166115f3c0601e2d1b82212033f4ed342e65d5f1e9d94bde2a_2022-03-04__000304.exe
Size 611KB
Sample220304-adfapseefq
SHA256 0156ec023f2738166115f3c0601e2d1b82212033f4ed342e65d5f1e9d94bde2a
MD5 5d7d66f3d95e9cf8fed97384a6d1c18b
SHA1 ee42e054f11839e23ba7fbb1bbc94883d8f07f28
SHA512 95a12b18d0baf6d007abca2333c93540c35e77eb457351cceedd00bd8f29fe1944e9970e90d4b78655ce98fd6a723ea9aff032af82a0cb69d31fbf3478fbf54d
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e5_0156ec023f2738166115f3c0601e2d1b82212033f4ed342e65d5f1e9d94bde2a_2022-03-04__000304.exe

.dll 611KB

emotet_exe_e5_0156ec023f2738166115f3c0601e2d1b82212033f4ed342e65d5f1e9d94bde2a_2022-03-04__000304.exe

IMPHASH bb2e319682f72745317e92a26483f973
SHA256 0156ec023f2738166115f3c0601e2d1b82212033f4ed342e65d5f1e9d94bde2a
MD5 5d7d66f3d95e9cf8fed97384a6d1c18b
SHA1 ee42e054f11839e23ba7fbb1bbc94883d8f07f28
SHA512 95a12b18d0baf6d007abca2333c93540c35e77eb457351cceedd00bd8f29fe1944e9970e90d4b78655ce98fd6a723ea9aff032af82a0cb69d31fbf3478fbf54d
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

241392

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapAlloc GetCommandLineA RaiseException VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc Sleep HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetACP IsValidCodePage HeapCreate HeapDestroy VirtualFree GetStdHandle SetHandleCount GetFileType GetStartupInfoA HeapFree GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA RtlUnwind GetTickCount GetFileTime GetFileSizeEx GetFileAttributesA FileTimeToLocalFileTime CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile WritePrivateProfileStringA FileTimeToSystemTime GetThreadLocale GetModuleHandleW GetOEMCP GetCPInfo InterlockedIncrement TlsFree LocalReAlloc TlsSetValue TlsAlloc GlobalHandle GlobalReAlloc TlsGetValue LocalAlloc GlobalFlags EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection InterlockedDecrement CloseHandle GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA InterlockedExchange lstrcmpA GetCurrentProcessId GetModuleFileNameA GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom CompareStringA GetLastError SetLastError MultiByteToWideChar lstrcmpW GetModuleHandleA GetProcAddress GetVersionExA WideCharToMultiByte LoadResource LockResource SizeofResource FindResourceA ExitProcess lstrcatA lstrlenA WinExec lstrcpyA GetWindowsDirectoryA LoadLibraryA FreeEnvironmentStringsA FreeLibrary

user32

RegisterClipboardFormatA PostThreadMessageA DestroyMenu SetWindowContextHelpId MapDialogRect GetDesktopWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog GetMessageA TranslateMessage GetActiveWindow ValidateRect PostQuitMessage GetWindowThreadProcessId EndPaint BeginPaint GetWindowDC ClientToScreen GetCursorPos WindowFromPoint IsWindowEnabled ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture SetWindowsHookExA CallNextHookEx GetClassLongA SetPropA GetPropA RemovePropA SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints GetKeyState SetMenu SetForegroundWindow IsWindowVisible UpdateWindow GetSubMenu GetMenuItemID GetMenuItemCount MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect CopyRect EnableWindow SendMessageA GetClientRect ReleaseCapture GetDlgCtrlID DefWindowProcA CallWindowProcA GetMenu GetWindowLongA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindow SetMenuItemBitmaps GetNextDlgGroupItem InvalidateRgn SetRect IsRectEmpty CopyAcceleratorTableA CharNextA CharUpperA GetClassNameA PtInRect InvalidateRect SetCapture SetCursor GetSysColor IsWindow InflateRect GetWindowRect GetDC ReleaseDC GetParent CopyIcon LoadCursorA MessageBeep SetWindowRgn GetSysColorBrush DrawStateA GetFocus TabbedTextOutA DrawTextA DrawTextExA GrayStringA RedrawWindow PostMessageA ScreenToClient ChildWindowFromPoint LoadIconA AppendMenuA GetSystemMenu GetSystemMetrics DrawIcon IsIconic CheckMenuItem EnableMenuItem GetMenuState ModifyMenuA LoadBitmapA GetMenuCheckMarkDimensions

gdi32

SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC SelectObject GetMapMode GetBkColor GetTextColor GetRgnBox GetWindowExtEx GetViewportExtEx CreateFontIndirectA SetMapMode SetBkMode RestoreDC SaveDC GetDeviceCaps CreateRectRgnIndirect SetBkColor SetTextColor GetClipBox CreateBitmap DeleteObject BitBlt Escape ExtTextOutA TextOutA RectVisible PtVisible CreateCompatibleDC CreateCompatibleBitmap Ellipse FillRgn CreateEllipticRgnIndirect CreateSolidBrush SetPixelV GetTextExtentPoint32A GetStockObject GetObjectA

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA ClosePrinter OpenPrinterA

advapi32

RegSetValueExA RegCreateKeyExA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegQueryValueExA RegOpenKeyExA RegQueryValueA RegCloseKey

shell32

ShellExecuteA

shlwapi

PathFindFileNameA PathStripToRootA PathIsUNCA PathFindExtensionA

oledlg

ord8

ole32

CoRevokeClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject OleIsCurrentClipboard CLSIDFromString CLSIDFromProgID CoTaskMemAlloc CoTaskMemFree OleFlushClipboard CoRegisterMessageFilter

oleaut32

VariantChangeType VariantInit SysAllocStringLen SysStringLen SysFreeString SysAllocStringByteLen VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime OleCreateFontIndirect SysAllocString VariantClear