emotet_exe_e5_60b7195b995bde9bf87597acef035ef2091df22d3618c1ae1bb2596605fdfe7c_2022-03-17__000100[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e5_60b7195b995bde9bf87597acef035ef2091df22d3618c1ae1bb2596605fdfe7c_2022-03-17__000100.exe
Size 732KB
Sample220317-abf48afffp
SHA256 60b7195b995bde9bf87597acef035ef2091df22d3618c1ae1bb2596605fdfe7c
MD5 295308b5331d43d13307fe56a0840d9d
SHA1 2946053467dc623eb459a0f7eac0b356d696043a
SHA512 f86a2141d0821badd49c10da9f4b3a392a8652b5ee20c8ca1815a1b934e9b45e0003397c1fb8356b7dd10e38f0ece1c02f779f3b116b4d5c796a64566d559831
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e5_60b7195b995bde9bf87597acef035ef2091df22d3618c1ae1bb2596605fdfe7c_2022-03-17__000100.exe

.dll 732KB

emotet_exe_e5_60b7195b995bde9bf87597acef035ef2091df22d3618c1ae1bb2596605fdfe7c_2022-03-17__000100.exe

IMPHASH 66a21a1bcb4077b3ed89c00ee693486b
SHA256 60b7195b995bde9bf87597acef035ef2091df22d3618c1ae1bb2596605fdfe7c
MD5 295308b5331d43d13307fe56a0840d9d
SHA1 2946053467dc623eb459a0f7eac0b356d696043a
SHA512 f86a2141d0821badd49c10da9f4b3a392a8652b5ee20c8ca1815a1b934e9b45e0003397c1fb8356b7dd10e38f0ece1c02f779f3b116b4d5c796a64566d559831
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

270958

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapDestroy HeapCreate VirtualFree GetStdHandle Sleep GetACP SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime HeapSize LCMapStringA LCMapStringW GetTimeZoneInformation GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA RaiseException RtlUnwind GetProcessHeap GetCommandLineA HeapReAlloc VirtualQuery GetSystemInfo VirtualAlloc VirtualProtect HeapAlloc HeapFree GetTickCount LocalFileTimeToFileTime FileTimeToLocalFileTime SystemTimeToFileTime FileTimeToSystemTime CreateFileA GetShortPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetThreadLocale GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetCurrentDirectoryA GetOEMCP GetCPInfo InterlockedIncrement TlsFree LocalReAlloc TlsSetValue TlsAlloc GlobalHandle TlsGetValue LocalAlloc GlobalFlags EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection lstrcpyA lstrcpyW InterlockedDecrement GlobalReAlloc GetDiskFreeSpaceA GetFullPathNameA GetTempFileNameA GetFileTime SetFileTime GetFileAttributesA CloseHandle GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA GetCurrentThread ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA lstrcmpA GlobalFree GlobalAlloc FormatMessageA LocalFree MulDiv FreeResource GetCurrentThreadId GlobalFindAtomA GlobalDeleteAtom FreeLibrary lstrcmpW GetVersionExA GlobalLock GlobalUnlock GetCurrentProcessId GetProcAddress GetModuleHandleA LoadLibraryA GlobalGetAtomNameA GlobalAddAtomA SetLastError ExitProcess LockResource SizeofResource LoadResource FindResourceA GetVersion CompareStringA lstrcmpiA GetLastError InterlockedExchange GetStringTypeExA lstrlenW MultiByteToWideChar CompareStringW WideCharToMultiByte lstrlenA

user32

GetMessageA TranslateMessage GetCursorPos ValidateRect SetWindowContextHelpId MapDialogRect ShowOwnedPopups PostQuitMessage MoveWindow SetWindowTextA IsDialogMessageA SetDlgItemTextA GetDlgItemTextA GetMenuStringA AppendMenuA InsertMenuA RemoveMenu RedrawWindow TranslateMDISysAccel DrawMenuBar DefMDIChildProcA DefFrameProcA SendDlgItemMessageA IsChild SetWindowsHookExA CallNextHookEx GetClassLongA SetPropA GetPropA RemovePropA GetWindowTextLengthA GetWindowTextA GetForegroundWindow DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints ScrollWindow TrackPopupMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar EndDialog CreateWindowExA GetClassInfoExA RegisterClassA AdjustWindowRectEx ScreenToClient DeferWindowPos GetScrollInfo SetScrollInfo PtInRect DefWindowProcA CallWindowProcA ClientToScreen GetWindowPlacement GetWindowRect GetSystemMetrics RegisterWindowMessageA UnpackDDElParam ReuseDDElParam LoadMenuA DestroyMenu GetClassNameA WinHelpA SetWindowPos SetFocus GetWindowThreadProcessId GetActiveWindow IsWindowEnabled EqualRect GetDlgItem SetWindowLongA GetKeyState GetDlgCtrlID GetMenu LoadIconA CharUpperA EnableWindow UpdateWindow InvalidateRect SetCursor PeekMessageA GetCapture ReleaseCapture LoadAcceleratorsA SetActiveWindow IsWindowVisible IsIconic InsertMenuItemA GetSubMenu GetMenuItemID GetMenuItemCount CreatePopupMenu GetClassInfoA IntersectRect GetNextDlgTabItem CreateDialogIndirectParamA SetRect DestroyCursor LoadCursorA ReleaseDC GetDC FindWindowA IsRectEmpty DrawIcon MessageBoxA SetWindowRgn ShowWindow GetSysColor GetClientRect FillRect SendMessageA CheckMenuItem EnableMenuItem GetMenuState ModifyMenuA GetParent GetFocus LoadBitmapA GetMenuCheckMarkDimensions SetMenuItemBitmaps TranslateAcceleratorA IsWindow GetWindowLongA GetWindow GetDesktopWindow SetMenu PostMessageA BringWindowToTop GetLastActivePopup CopyRect SetRectEmpty OffsetRect SetTimer KillTimer SetCapture DeleteMenu GetSystemMenu SetParent RegisterClipboardFormatA LockWindowUpdate GetDCEx GetTabbedTextExtentA PostThreadMessageA CreateMenu UnregisterClassA MessageBeep GetNextDlgGroupItem InvalidateRgn CopyAcceleratorTableA CharNextA DestroyIcon GetMenuItemInfoA InflateRect GetSysColorBrush EndPaint BeginPaint GetWindowDC GrayStringA DrawTextExA DrawTextA TabbedTextOutA SystemParametersInfoA IsZoomed WindowFromPoint

gdi32

LineTo MoveToEx SetTextAlign SelectClipRgn CreateRectRgn GetViewportExtEx GetWindowExtEx BitBlt GetPixel PtVisible RectVisible TextOutA ExtTextOutA Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetCurrentPositionEx ExtSelectClipRgn CreatePatternBrush CreateFontIndirectA CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode GetTextColor GetRgnBox GetNearestColor GetBkMode GetPolyFillMode GetROP2 GetStretchBltMode GetTextAlign GetTextFaceA GetWindowOrgEx IntersectClipRect ExcludeClipRect SetMapMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC StretchDIBits GetTextMetricsA GetCharWidthA DeleteObject GetTextExtentPoint32A SelectObject GetBkColor Ellipse CreateEllipticRgn DeleteDC EndDoc AbortDoc SetAbortProc EndPage StartPage StartDocA GetStockObject PatBlt Rectangle GetViewportOrgEx CreatePen CreateDCA GetObjectA SetBkColor SetTextColor GetClipBox CreateCompatibleDC CreateCompatibleBitmap CreateBitmap LPtoDP GetDeviceCaps DPtoLP CreateSolidBrush CreateFontA

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA GetJobA ClosePrinter

advapi32

GetFileSecurityA SetFileSecurityA RegDeleteValueA RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegSetValueA RegCloseKey RegCreateKeyA

shell32

DragFinish DragQueryFileA ExtractIconA SHGetFileInfoA DragAcceptFiles

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CoRevokeClassObject OleIsCurrentClipboard CoFreeUnusedLibraries OleUninitialize OleDestroyMenuDescriptor OleCreateMenuDescriptor IsAccelerator OleTranslateAccelerator CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID CoTaskMemAlloc CoTaskMemFree OleFlushClipboard OleInitialize CoRegisterMessageFilter

oleaut32

VariantClear VariantInit SysAllocStringLen SysFreeString SysStringLen SysAllocStringByteLen VariantTimeToSystemTime SystemTimeToVariantTime OleCreateFontIndirect SafeArrayDestroy SysAllocString VariantCopy VariantChangeType

odbc32

ord5 ord51 ord50 ord45 ord44 ord68 ord43 ord59 ord13 ord18 ord46 ord12 ord19 ord11 ord49 ord48 ord8 ord20 ord16 ord3 ord14 ord9 ord15 ord1 ord2 ord10 ord41 ord17 ord4 ord72 ord54