emotet_exe_e4_69564611bc5f4280f8d419533a77548aa9a45cc024e926b502e214ca0ade8a7d_2022-03-16__164822[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e4_69564611bc5f4280f8d419533a77548aa9a45cc024e926b502e214ca0ade8a7d_2022-03-16__164822.exe
Size 736KB
Sample220316-vbnjhsdedn
SHA256 69564611bc5f4280f8d419533a77548aa9a45cc024e926b502e214ca0ade8a7d
MD5 2c5815e96ab483024d61c7a3e04e53eb
SHA1 5afeae17fd88831bd3f8fda5e6d71a051cbe4007
SHA512 192146913de729002468ec2df1002525cfd5cedd7656d292e1d5b61dfad6c5469a030e556ce8de1d966d4d7021b91e3411e8ad4bbca078de2ca66d7ea79745e2
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_69564611bc5f4280f8d419533a77548aa9a45cc024e926b502e214ca0ade8a7d_2022-03-16__164822.exe

.dll 736KB

emotet_exe_e4_69564611bc5f4280f8d419533a77548aa9a45cc024e926b502e214ca0ade8a7d_2022-03-16__164822.exe

IMPHASH 66a21a1bcb4077b3ed89c00ee693486b
SHA256 69564611bc5f4280f8d419533a77548aa9a45cc024e926b502e214ca0ade8a7d
MD5 2c5815e96ab483024d61c7a3e04e53eb
SHA1 5afeae17fd88831bd3f8fda5e6d71a051cbe4007
SHA512 192146913de729002468ec2df1002525cfd5cedd7656d292e1d5b61dfad6c5469a030e556ce8de1d966d4d7021b91e3411e8ad4bbca078de2ca66d7ea79745e2
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

271007

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapDestroy HeapCreate VirtualFree GetStdHandle Sleep GetACP SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime HeapSize LCMapStringA LCMapStringW GetTimeZoneInformation GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA RaiseException RtlUnwind GetProcessHeap GetCommandLineA HeapReAlloc VirtualQuery GetSystemInfo VirtualAlloc VirtualProtect HeapAlloc HeapFree GetTickCount LocalFileTimeToFileTime FileTimeToLocalFileTime SystemTimeToFileTime FileTimeToSystemTime CreateFileA GetShortPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetThreadLocale GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetCurrentDirectoryA GetOEMCP GetCPInfo InterlockedIncrement TlsFree LocalReAlloc TlsSetValue TlsAlloc GlobalHandle TlsGetValue LocalAlloc GlobalFlags EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection lstrcpyA lstrcpyW InterlockedDecrement GlobalReAlloc GetDiskFreeSpaceA GetFullPathNameA GetTempFileNameA GetFileTime SetFileTime GetFileAttributesA CloseHandle GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA GetCurrentThread ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA lstrcmpA GlobalFree GlobalAlloc FormatMessageA LocalFree MulDiv FreeResource GetCurrentThreadId GlobalFindAtomA GlobalDeleteAtom FreeLibrary lstrcmpW GetVersionExA GlobalLock GlobalUnlock GetCurrentProcessId GetProcAddress GetModuleHandleA LoadLibraryA GlobalGetAtomNameA GlobalAddAtomA SetLastError ExitProcess LockResource SizeofResource LoadResource FindResourceA GetVersion CompareStringA lstrcmpiA GetLastError InterlockedExchange GetStringTypeExA lstrlenW MultiByteToWideChar CompareStringW WideCharToMultiByte lstrlenA

user32

GetMessageA TranslateMessage GetCursorPos ValidateRect SetWindowContextHelpId MapDialogRect ShowOwnedPopups PostQuitMessage MoveWindow SetWindowTextA IsDialogMessageA SetDlgItemTextA GetDlgItemTextA GetMenuStringA AppendMenuA InsertMenuA RemoveMenu RedrawWindow TranslateMDISysAccel DrawMenuBar DefMDIChildProcA DefFrameProcA SendDlgItemMessageA IsChild SetWindowsHookExA CallNextHookEx GetClassLongA SetPropA GetPropA RemovePropA GetWindowTextLengthA GetWindowTextA GetForegroundWindow DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints ScrollWindow TrackPopupMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar EndDialog CreateWindowExA GetClassInfoExA RegisterClassA AdjustWindowRectEx ScreenToClient DeferWindowPos GetScrollInfo SetScrollInfo PtInRect DefWindowProcA CallWindowProcA ClientToScreen GetWindowPlacement GetWindowRect GetSystemMetrics RegisterWindowMessageA UnpackDDElParam ReuseDDElParam LoadMenuA DestroyMenu GetClassNameA WinHelpA SetWindowPos SetFocus GetWindowThreadProcessId GetActiveWindow IsWindowEnabled EqualRect GetDlgItem SetWindowLongA GetKeyState GetDlgCtrlID GetMenu LoadIconA CharUpperA EnableWindow UpdateWindow InvalidateRect SetCursor PeekMessageA GetCapture ReleaseCapture LoadAcceleratorsA SetActiveWindow IsWindowVisible IsIconic InsertMenuItemA GetSubMenu GetMenuItemID GetMenuItemCount CreatePopupMenu GetClassInfoA IntersectRect GetNextDlgTabItem CreateDialogIndirectParamA SetRect DestroyCursor LoadCursorA ReleaseDC GetDC FindWindowA IsRectEmpty DrawIcon MessageBoxA SetWindowRgn ShowWindow GetSysColor GetClientRect FillRect SendMessageA CheckMenuItem EnableMenuItem GetMenuState ModifyMenuA GetParent GetFocus LoadBitmapA GetMenuCheckMarkDimensions SetMenuItemBitmaps TranslateAcceleratorA IsWindow GetWindowLongA GetWindow GetDesktopWindow SetMenu PostMessageA BringWindowToTop GetLastActivePopup CopyRect SetRectEmpty OffsetRect SetTimer KillTimer SetCapture DeleteMenu GetSystemMenu SetParent RegisterClipboardFormatA LockWindowUpdate GetDCEx GetTabbedTextExtentA PostThreadMessageA CreateMenu UnregisterClassA MessageBeep GetNextDlgGroupItem InvalidateRgn CopyAcceleratorTableA CharNextA DestroyIcon GetMenuItemInfoA InflateRect GetSysColorBrush EndPaint BeginPaint GetWindowDC GrayStringA DrawTextExA DrawTextA TabbedTextOutA SystemParametersInfoA IsZoomed WindowFromPoint

gdi32

LineTo MoveToEx SetTextAlign SelectClipRgn CreateRectRgn GetViewportExtEx GetWindowExtEx BitBlt GetPixel PtVisible RectVisible TextOutA ExtTextOutA Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetCurrentPositionEx ExtSelectClipRgn CreatePatternBrush CreateFontIndirectA CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode GetTextColor GetRgnBox GetNearestColor GetBkMode GetPolyFillMode GetROP2 GetStretchBltMode GetTextAlign GetTextFaceA GetWindowOrgEx IntersectClipRect ExcludeClipRect SetMapMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC StretchDIBits GetTextMetricsA GetCharWidthA DeleteObject GetTextExtentPoint32A SelectObject GetBkColor Ellipse CreateEllipticRgn DeleteDC EndDoc AbortDoc SetAbortProc EndPage StartPage StartDocA GetStockObject PatBlt Rectangle GetViewportOrgEx CreatePen CreateDCA GetObjectA SetBkColor SetTextColor GetClipBox CreateCompatibleDC CreateCompatibleBitmap CreateBitmap LPtoDP GetDeviceCaps DPtoLP CreateSolidBrush CreateFontA

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA GetJobA ClosePrinter

advapi32

GetFileSecurityA SetFileSecurityA RegDeleteValueA RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegSetValueA RegCloseKey RegCreateKeyA

shell32

DragFinish DragQueryFileA ExtractIconA SHGetFileInfoA DragAcceptFiles

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CoRevokeClassObject OleIsCurrentClipboard CoFreeUnusedLibraries OleUninitialize OleDestroyMenuDescriptor OleCreateMenuDescriptor IsAccelerator OleTranslateAccelerator CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID CoTaskMemAlloc CoTaskMemFree OleFlushClipboard OleInitialize CoRegisterMessageFilter

oleaut32

VariantClear VariantInit SysAllocStringLen SysFreeString SysStringLen SysAllocStringByteLen VariantTimeToSystemTime SystemTimeToVariantTime OleCreateFontIndirect SafeArrayDestroy SysAllocString VariantCopy VariantChangeType

odbc32

ord5 ord51 ord50 ord45 ord44 ord68 ord43 ord59 ord13 ord18 ord46 ord12 ord19 ord11 ord49 ord48 ord8 ord20 ord16 ord3 ord14 ord9 ord15 ord1 ord2 ord10 ord41 ord17 ord4 ord72 ord54