emotet_exe_e5_bf5d064a1e1bbfb82e160c00e6ee68839a74d48d7f86ff871696ea54a6ec18cb_2022-03-10__000246[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e5_bf5d064a1e1bbfb82e160c00e6ee68839a74d48d7f86ff871696ea54a6ec18cb_2022-03-10__000246.exe
Size 934KB
Sample220310-ab3cfsegcr
SHA256 bf5d064a1e1bbfb82e160c00e6ee68839a74d48d7f86ff871696ea54a6ec18cb
MD5 2c87855cb295c8ef674b938e3e61c009
SHA1 bb6995f61f6b654c381824ca32c06580e4a23bb2
SHA512 916b8b917d0047a061def2ff216d9a5faf7a5da5beba888d0ce5525fe02f64d60090db4fcca5a1bd811fc1c0315487e28fa27ec99047b3a27935d361df37f339
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e5_bf5d064a1e1bbfb82e160c00e6ee68839a74d48d7f86ff871696ea54a6ec18cb_2022-03-10__000246.exe

.dll 934KB

emotet_exe_e5_bf5d064a1e1bbfb82e160c00e6ee68839a74d48d7f86ff871696ea54a6ec18cb_2022-03-10__000246.exe

IMPHASH 5f28f2b6d73fe5c30078b3ae5a8048ac
SHA256 bf5d064a1e1bbfb82e160c00e6ee68839a74d48d7f86ff871696ea54a6ec18cb
MD5 2c87855cb295c8ef674b938e3e61c009
SHA1 bb6995f61f6b654c381824ca32c06580e4a23bb2
SHA512 916b8b917d0047a061def2ff216d9a5faf7a5da5beba888d0ce5525fe02f64d60090db4fcca5a1bd811fc1c0315487e28fa27ec99047b3a27935d361df37f339
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

408163

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapFree HeapAlloc GetCommandLineA RaiseException VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc ExitThread CreateThread HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetACP IsValidCodePage LCMapStringW LCMapStringA HeapCreate HeapDestroy VirtualFree FatalAppExitA GetStdHandle SetHandleCount GetFileType RtlUnwind FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetTimeZoneInformation GetDriveTypeA SetConsoleCtrlHandler InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetConsoleCP GetConsoleMode GetLocaleInfoW SetCurrentDirectoryA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA GetTickCount GetFileTime GetFileSizeEx GetFileAttributesA SetFileAttributesA SetFileTime LocalFileTimeToFileTime SetErrorMode CreateFileA GetShortPathNameA GetFullPathNameA GetVolumeInformationA GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile lstrcmpiA GetStringTypeExA DeleteFileA MoveFileA GetCurrentDirectoryA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA SystemTimeToFileTime GetThreadLocale GetModuleHandleW GetAtomNameA GetOEMCP GetCPInfo InterlockedIncrement GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA InterlockedExchange lstrcmpA GlobalFree CopyFileA GlobalSize GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree lstrlenW MulDiv GetCurrentProcessId GetModuleFileNameA InterlockedDecrement GetModuleFileNameW FindFirstFileA FileTimeToLocalFileTime FileTimeToSystemTime FindNextFileA FindClose lstrlenA FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom FreeLibrary CompareStringA LoadLibraryA GetLastError SetLastError MultiByteToWideChar lstrcmpW GetModuleHandleA GetProcAddress GetVersionExA lstrcpyA ExitProcess Sleep WideCharToMultiByte LoadResource LockResource SizeofResource GetStartupInfoA FindResourceA

user32

LoadAcceleratorsA GetMenuBarInfo LoadMenuA ReuseDDElParam UnpackDDElParam RegisterClipboardFormatA GetSystemMenu SetParent UnionRect PostThreadMessageA GetDCEx LockWindowUpdate SetCapture DeleteMenu UnregisterClassA GetSysColorBrush DestroyMenu GetMenuItemInfoA SetWindowContextHelpId MapDialogRect CreateDialogIndirectParamA GetNextDlgTabItem EndDialog ShowOwnedPopups GetMessageA GetActiveWindow ValidateRect PostQuitMessage EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA FillRect MapVirtualKeyA GetKeyNameTextA GetMenuStringA AppendMenuA InsertMenuA RemoveMenu GetWindowThreadProcessId ScrollWindowEx IsWindowEnabled MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA ModifyMenuA GetMenuState EnableMenuItem InsertMenuItemA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture SetWindowsHookExA CallNextHookEx GetClassLongA SetPropA GetPropA RemovePropA GetFocus IsWindow SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow BeginDeferWindowPos EndDeferWindowPos GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints ScrollWindow TrackPopupMenuEx TrackPopupMenu GetKeyState SetMenu GetScrollRange GetScrollPos SetForegroundWindow ShowScrollBar UpdateWindow PostMessageA GetSubMenu GetMenuItemID GetMenuItemCount MessageBoxA EnableWindow GetClassNameA GetWindowRect GetDesktopWindow CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx DeferWindowPos GetScrollInfo SetScrollInfo CopyRect SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA CreatePopupMenu BringWindowToTop TranslateAcceleratorA MessageBeep GetNextDlgGroupItem InvalidateRgn CopyAcceleratorTableA CharNextA GetMenu GetWindowLongA GetDialogBaseUnits CharUpperA DestroyIcon WaitMessage ReleaseCapture CheckMenuItem WindowFromPoint GetWindow SendMessageA IsWindowVisible GetParent GetCaretPos DispatchMessageA TranslateMessage PeekMessageA SetRectEmpty GetSysColor GetSystemMetrics GetClientRect GetDC ReleaseDC SetScrollPos IsRectEmpty SetScrollRange OffsetRect InflateRect PtInRect SetRect InvalidateRect SetCursor GetCursorPos ScreenToClient LoadCursorA SetTimer KillTimer EqualRect LoadIconA ShowWindow DrawIcon IsIconic GetWindowPlacement SystemParametersInfoA IntersectRect SetWindowPos SetWindowLongA SetDlgItemInt

gdi32

GetCurrentPositionEx ArcTo PolyDraw PolylineTo PolyBezierTo ExtSelectClipRgn DeleteDC CreateDIBPatternBrushPt CreatePatternBrush SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile CreatePen ScaleWindowExtEx CreateSolidBrush CreateHatchBrush CreateFontIndirectA SetRectRgn CombineRgn GetMapMode DPtoLP GetTextMetricsA GetBkColor GetTextColor GetRgnBox GetCharWidthA CreateFontA StretchDIBits OffsetWindowOrgEx SetWindowExtEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx Escape ExtTextOutA TextOutA RectVisible PtVisible StartDocA GetPixel GetWindowExtEx ExtCreatePen GetStockObject SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode ModifyWorldTransform SetWorldTransform SetGraphicsMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC PatBlt CreateRectRgnIndirect CreateDCA CopyMetaFileA GetDeviceCaps CreateBitmap GetObjectA SetBkColor SetTextColor GetClipBox GetDCOrgEx GetTextExtentPoint32A BitBlt SelectObject CreateCompatibleDC CreateCompatibleBitmap GetViewportExtEx

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA ClosePrinter OpenPrinterA

advapi32

RegOpenKeyA RegDeleteValueA RegSetValueExA RegCreateKeyA RegCreateKeyExA RegQueryValueA RegCloseKey RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegSetValueA

shell32

DragQueryFileA SHGetPathFromIDListA SHBrowseForFolderA ExtractIconA SHGetFileInfoA DragFinish SHGetMalloc

comctl32

ord17

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathIsUNCA PathFindExtensionA PathRemoveFileSpecW

oledlg

ord8

ole32

OleSetClipboard CoRevokeClassObject CoRegisterClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize OleRun CoInitializeEx CoUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoCreateInstance StringFromGUID2 OleIsCurrentClipboard CLSIDFromString CLSIDFromProgID OleDuplicateData CoTaskMemAlloc ReleaseStgMedium CreateBindCtx CoTreatAsClass StringFromCLSID ReadClassStg ReadFmtUserTypeStg OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree OleFlushClipboard CoRegisterMessageFilter CreateStreamOnHGlobal CoDisconnectObject

oleaut32

VariantChangeType VariantInit SysAllocStringLen SysStringLen SysFreeString SysAllocStringByteLen SysStringByteLen RegisterTypeLi LoadTypeLi LoadRegTypeLi SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SystemTimeToVariantTime SysReAllocStringLen VarDateFromStr VarBstrFromCy VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromDate OleCreateFontIndirect SysAllocString VariantClear