emotet_exe_e5_c05b38d967ddd2c9313b0372098dbd05da2d1996bb2ad86223a18e3eaefc47f2_2022-03-15__071318[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e5_c05b38d967ddd2c9313b0372098dbd05da2d1996bb2ad86223a18e3eaefc47f2_2022-03-15__071318.exe
Size 1.2MB
Sample220315-h2ps2safej
SHA256 c05b38d967ddd2c9313b0372098dbd05da2d1996bb2ad86223a18e3eaefc47f2
MD5 e60d32e227530e06b74e296c9890b881
SHA1 0852881b7229b26766dddcb94130591cfde23643
SHA512 d55b616ab0e11fd1010f88e77a217ca4fba3439d251b339832d41adc7155d4533b800a5750f52164b32ae6422449c5a3c245ad338c8b0ce0a643af3cb659a69d
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e5_c05b38d967ddd2c9313b0372098dbd05da2d1996bb2ad86223a18e3eaefc47f2_2022-03-15__071318.exe

.dll 1.2MB

emotet_exe_e5_c05b38d967ddd2c9313b0372098dbd05da2d1996bb2ad86223a18e3eaefc47f2_2022-03-15__071318.exe

IMPHASH 6ecf0c845e4d38072c89b850ccda284f
SHA256 c05b38d967ddd2c9313b0372098dbd05da2d1996bb2ad86223a18e3eaefc47f2
MD5 e60d32e227530e06b74e296c9890b881
SHA1 0852881b7229b26766dddcb94130591cfde23643
SHA512 d55b616ab0e11fd1010f88e77a217ca4fba3439d251b339832d41adc7155d4533b800a5750f52164b32ae6422449c5a3c245ad338c8b0ce0a643af3cb659a69d
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

406981

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsDebuggerPresent Sleep HeapDestroy HeapCreate VirtualFree FatalAppExitA GetStdHandle SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetACP SetConsoleCtrlHandler GetTimeZoneInformation SetUnhandledExceptionFilter GetStringTypeW LCMapStringA LCMapStringW GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA UnhandledExceptionFilter ExitProcess TerminateProcess HeapSize CreateThread ExitThread RaiseException GetProcessHeap GetCommandLineA VirtualQuery GetSystemInfo VirtualAlloc VirtualProtect HeapReAlloc HeapAlloc HeapFree RtlUnwind GetProfileIntA GetTickCount SetErrorMode GetCurrentDirectoryA SetFileAttributesA SystemTimeToFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime FileTimeToSystemTime CreateFileA GetShortPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetThreadLocale GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetAtomNameA GetOEMCP GetCPInfo InterlockedIncrement GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedDecrement GetModuleFileNameW CopyFileA GlobalSize FormatMessageA LocalFree GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA GlobalUnlock GlobalFree GetCurrentProcessId CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetCurrentThread ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA GlobalLock lstrcmpA GlobalAlloc GetDiskFreeSpaceA GetFullPathNameA GetTempFileNameA GetFileTime SetFileTime GetFileAttributesA MulDiv FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom FreeLibrary LoadLibraryA SetLastError lstrcmpW GetModuleHandleA GetProcAddress GetVersionExA SizeofResource FindResourceA LoadResource LockResource GetStringTypeExW GetStringTypeExA GetEnvironmentVariableW GetEnvironmentVariableA lstrlenA lstrcmpiW lstrcmpiA CompareStringW CompareStringA lstrlenW GetVersion GetLastError WideCharToMultiByte MultiByteToWideChar InterlockedExchange GetStringTypeA

user32

CreateMenu PostThreadMessageA GetTabbedTextExtentA WindowFromPoint GetDCEx LockWindowUpdate UnregisterClassA RegisterClipboardFormatA IsClipboardFormatAvailable WaitMessage SendNotifyMessageA DestroyIcon GetMenuItemInfoA GetSysColorBrush GetMenuStringA InsertMenuA RemoveMenu SetParent GetSystemMenu AppendMenuA DeleteMenu SetCursorPos RedrawWindow InflateRect IsZoomed DestroyCursor EndPaint BeginPaint GetWindowDC ReleaseDC GetDC GrayStringA DrawTextExA DrawTextA TabbedTextOutA SetRect ReuseDDElParam LoadMenuA DestroyMenu LoadAcceleratorsA InsertMenuItemA CreatePopupMenu SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorA SetWindowContextHelpId MapDialogRect GetDesktopWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog GetWindowThreadProcessId ShowOwnedPopups GetMessageA TranslateMessage GetActiveWindow ValidateRect PostQuitMessage ScrollWindowEx IsWindowEnabled ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton WindowFromDC ReleaseCapture SetCursor LoadCursorA SetCapture KillTimer SetTimer ClientToScreen SetWindowRgn DrawIcon FillRect IsRectEmpty FindWindowA SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem RegisterWindowMessageA LoadIconA SendDlgItemMessageA WinHelpA GetCapture SetWindowsHookExA CallNextHookEx GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints ScrollWindow TrackPopupMenuEx TrackPopupMenu GetKeyState EnableWindow SendMessageA UpdateWindow GetWindowRect CharLowerA UnpackDDElParam CharLowerW SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar IsWindowVisible GetClientRect GetMenu PostMessageA GetSubMenu GetMenuItemID GetMenuItemCount MessageBoxA CreateWindowExA InSendMessage UnionRect MapVirtualKeyA GetKeyNameTextA MessageBeep GetNextDlgGroupItem InvalidateRgn CopyAcceleratorTableA CharNextA GetCursorPos GetDialogBaseUnits CharUpperA CharUpperW IsChild GetFocus SetFocus IsWindow GetWindow AdjustWindowRectEx IsIconic InvalidateRect GetParent GetDlgCtrlID GetSystemMetrics GetWindowPlacement SystemParametersInfoA IntersectRect OffsetRect SetWindowPos SetWindowLongA GetWindowLongA CallWindowProcA DefWindowProcA SetWindowPlacement PtInRect SetScrollInfo GetScrollInfo CopyRect DeferWindowPos EqualRect ScreenToClient GetSysColor RegisterClassA GetClassInfoA GetClassInfoExA

gdi32

ExtTextOutA Escape SelectObject SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetCurrentPositionEx ArcTo PolyDraw PolylineTo PolyBezierTo ExtSelectClipRgn CreateDIBPatternBrushPt CreatePatternBrush GetStockObject SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile CreatePen ExtCreatePen CreateSolidBrush TextOutA GetViewportOrgEx Rectangle PatBlt GetCharWidthA CreateFontA StretchDIBits GetTextMetricsA GetTextExtentPoint32A CopyMetaFileA CreateFontIndirectA GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox SetRectRgn CombineRgn GetMapMode GetNearestColor GetBkMode GetPolyFillMode GetROP2 GetStretchBltMode GetTextAlign GetTextFaceA GetWindowOrgEx CreateMetaFileA CloseMetaFile DeleteMetaFile RectVisible PtVisible GetPixel BitBlt GetWindowExtEx GetViewportExtEx SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection CreateHatchBrush SetPixel SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode ModifyWorldTransform SetWorldTransform SetGraphicsMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC CreateDCA DeleteDC EndDoc AbortDoc SetAbortProc EndPage StartPage StartDocA GetDeviceCaps CreateCompatibleDC CreateCompatibleBitmap Ellipse LPtoDP DPtoLP CreateEllipticRgn CreateBitmap GetObjectA SetBkColor SetTextColor GetClipBox GetDCOrgEx SetMapperFlags

comdlg32

GetFileTitleA

winspool.drv

GetJobA DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegSetValueA RegDeleteValueA RegSetValueExA RegCreateKeyExA RegQueryValueA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegCloseKey GetFileSecurityA SetFileSecurityA RegCreateKeyA

shell32

DragQueryFileA SHGetFileInfoA ExtractIconA DragFinish

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

OleCreateStaticFromData OleCreate OleLoad GetHGlobalFromILockBytes OleSetContainedObject OleCreateFromFile OleCreateLinkToFile OleGetIconOfClass CreateItemMoniker CreateGenericComposite OleIsRunning GetRunningObjectTable CoLockObjectExternal CreateFileMoniker CoGetMalloc StgCreateDocfile StgOpenStorage StgIsStorageFile CreateOleAdviseHolder CreateDataAdviseHolder OleGetClipboard CoRegisterClassObject CoRevokeClassObject OleSetClipboard OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter OleSetMenuDescriptor OleQueryCreateFromData OleQueryLinkFromData DoDragDrop OleCreateLinkFromData OleInitialize CoFreeUnusedLibraries OleUninitialize OleRun StringFromGUID2 CoCreateInstance OleDestroyMenuDescriptor OleCreateMenuDescriptor IsAccelerator OleTranslateAccelerator OleRegGetMiscStatus OleRegEnumVerbs CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoDisconnectObject OleDuplicateData CoTaskMemAlloc ReleaseStgMedium CreateBindCtx CoTreatAsClass StringFromCLSID ReadClassStg ReadFmtUserTypeStg OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree CLSIDFromString CLSIDFromProgID OleLockRunning OleCreateFromData CreateStreamOnHGlobal OleSaveToStream WriteClassStm OleSave

oleaut32

VariantClear VariantChangeType VariantInit SysAllocStringLen SysFreeString SysStringLen SysAllocStringByteLen SysStringByteLen OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroyData SafeArrayDestroyDescriptor SysReAllocStringLen VarDateFromStr VarBstrFromCy VarBstrFromDec VarDecFromStr VarCyFromStr LoadTypeLi VarBstrFromDate

Name

.text

Size

748KB

Virtual Size

745KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

176KB

Virtual Size

173KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

20KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

20KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

4KB

Virtual Size

793B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

188KB

Virtual Size

186KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

56KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ