emotet_exe_e5_e4d40ee903a91d8d35c592790d38781eb44ea17ef543ed7b48b451b689aaffe5_2022-03-17__000056[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e5_e4d40ee903a91d8d35c592790d38781eb44ea17ef543ed7b48b451b689aaffe5_2022-03-17__000056.exe
Size 732KB
Sample220317-abf48ahdf2
SHA256 e4d40ee903a91d8d35c592790d38781eb44ea17ef543ed7b48b451b689aaffe5
MD5 f2a026f01f8dc52fb3e70010e1e21f5f
SHA1 639e29fa67e9a80e86c29edb3c586be45c92bcf7
SHA512 35ea589b239a4cd93ea63cdafe6b97c31055207f8acc2e70b11278a660b7f0f23904aca1bd629f009c5124e8d30743c8c2149605669650fdc58fc829ac8ae6c0
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e5_e4d40ee903a91d8d35c592790d38781eb44ea17ef543ed7b48b451b689aaffe5_2022-03-17__000056.exe

.dll 732KB

emotet_exe_e5_e4d40ee903a91d8d35c592790d38781eb44ea17ef543ed7b48b451b689aaffe5_2022-03-17__000056.exe

IMPHASH 66a21a1bcb4077b3ed89c00ee693486b
SHA256 e4d40ee903a91d8d35c592790d38781eb44ea17ef543ed7b48b451b689aaffe5
MD5 f2a026f01f8dc52fb3e70010e1e21f5f
SHA1 639e29fa67e9a80e86c29edb3c586be45c92bcf7
SHA512 35ea589b239a4cd93ea63cdafe6b97c31055207f8acc2e70b11278a660b7f0f23904aca1bd629f009c5124e8d30743c8c2149605669650fdc58fc829ac8ae6c0
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

270958

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapDestroy HeapCreate VirtualFree GetStdHandle Sleep GetACP SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime HeapSize LCMapStringA LCMapStringW GetTimeZoneInformation GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA RaiseException RtlUnwind GetProcessHeap GetCommandLineA HeapReAlloc VirtualQuery GetSystemInfo VirtualAlloc VirtualProtect HeapAlloc HeapFree GetTickCount LocalFileTimeToFileTime FileTimeToLocalFileTime SystemTimeToFileTime FileTimeToSystemTime CreateFileA GetShortPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetThreadLocale GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetCurrentDirectoryA GetOEMCP GetCPInfo InterlockedIncrement TlsFree LocalReAlloc TlsSetValue TlsAlloc GlobalHandle TlsGetValue LocalAlloc GlobalFlags EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection lstrcpyA lstrcpyW InterlockedDecrement GlobalReAlloc GetDiskFreeSpaceA GetFullPathNameA GetTempFileNameA GetFileTime SetFileTime GetFileAttributesA CloseHandle GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA GetCurrentThread ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA lstrcmpA GlobalFree GlobalAlloc FormatMessageA LocalFree MulDiv FreeResource GetCurrentThreadId GlobalFindAtomA GlobalDeleteAtom FreeLibrary lstrcmpW GetVersionExA GlobalLock GlobalUnlock GetCurrentProcessId GetProcAddress GetModuleHandleA LoadLibraryA GlobalGetAtomNameA GlobalAddAtomA SetLastError ExitProcess LockResource SizeofResource LoadResource FindResourceA GetVersion CompareStringA lstrcmpiA GetLastError InterlockedExchange GetStringTypeExA lstrlenW MultiByteToWideChar CompareStringW WideCharToMultiByte lstrlenA

user32

GetMessageA TranslateMessage GetCursorPos ValidateRect SetWindowContextHelpId MapDialogRect ShowOwnedPopups PostQuitMessage MoveWindow SetWindowTextA IsDialogMessageA SetDlgItemTextA GetDlgItemTextA GetMenuStringA AppendMenuA InsertMenuA RemoveMenu RedrawWindow TranslateMDISysAccel DrawMenuBar DefMDIChildProcA DefFrameProcA SendDlgItemMessageA IsChild SetWindowsHookExA CallNextHookEx GetClassLongA SetPropA GetPropA RemovePropA GetWindowTextLengthA GetWindowTextA GetForegroundWindow DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints ScrollWindow TrackPopupMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar EndDialog CreateWindowExA GetClassInfoExA RegisterClassA AdjustWindowRectEx ScreenToClient DeferWindowPos GetScrollInfo SetScrollInfo PtInRect DefWindowProcA CallWindowProcA ClientToScreen GetWindowPlacement GetWindowRect GetSystemMetrics RegisterWindowMessageA UnpackDDElParam ReuseDDElParam LoadMenuA DestroyMenu GetClassNameA WinHelpA SetWindowPos SetFocus GetWindowThreadProcessId GetActiveWindow IsWindowEnabled EqualRect GetDlgItem SetWindowLongA GetKeyState GetDlgCtrlID GetMenu LoadIconA CharUpperA EnableWindow UpdateWindow InvalidateRect SetCursor PeekMessageA GetCapture ReleaseCapture LoadAcceleratorsA SetActiveWindow IsWindowVisible IsIconic InsertMenuItemA GetSubMenu GetMenuItemID GetMenuItemCount CreatePopupMenu GetClassInfoA IntersectRect GetNextDlgTabItem CreateDialogIndirectParamA SetRect DestroyCursor LoadCursorA ReleaseDC GetDC FindWindowA IsRectEmpty DrawIcon MessageBoxA SetWindowRgn ShowWindow GetSysColor GetClientRect FillRect SendMessageA CheckMenuItem EnableMenuItem GetMenuState ModifyMenuA GetParent GetFocus LoadBitmapA GetMenuCheckMarkDimensions SetMenuItemBitmaps TranslateAcceleratorA IsWindow GetWindowLongA GetWindow GetDesktopWindow SetMenu PostMessageA BringWindowToTop GetLastActivePopup CopyRect SetRectEmpty OffsetRect SetTimer KillTimer SetCapture DeleteMenu GetSystemMenu SetParent RegisterClipboardFormatA LockWindowUpdate GetDCEx GetTabbedTextExtentA PostThreadMessageA CreateMenu UnregisterClassA MessageBeep GetNextDlgGroupItem InvalidateRgn CopyAcceleratorTableA CharNextA DestroyIcon GetMenuItemInfoA InflateRect GetSysColorBrush EndPaint BeginPaint GetWindowDC GrayStringA DrawTextExA DrawTextA TabbedTextOutA SystemParametersInfoA IsZoomed WindowFromPoint

gdi32

LineTo MoveToEx SetTextAlign SelectClipRgn CreateRectRgn GetViewportExtEx GetWindowExtEx BitBlt GetPixel PtVisible RectVisible TextOutA ExtTextOutA Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetCurrentPositionEx ExtSelectClipRgn CreatePatternBrush CreateFontIndirectA CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode GetTextColor GetRgnBox GetNearestColor GetBkMode GetPolyFillMode GetROP2 GetStretchBltMode GetTextAlign GetTextFaceA GetWindowOrgEx IntersectClipRect ExcludeClipRect SetMapMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC StretchDIBits GetTextMetricsA GetCharWidthA DeleteObject GetTextExtentPoint32A SelectObject GetBkColor Ellipse CreateEllipticRgn DeleteDC EndDoc AbortDoc SetAbortProc EndPage StartPage StartDocA GetStockObject PatBlt Rectangle GetViewportOrgEx CreatePen CreateDCA GetObjectA SetBkColor SetTextColor GetClipBox CreateCompatibleDC CreateCompatibleBitmap CreateBitmap LPtoDP GetDeviceCaps DPtoLP CreateSolidBrush CreateFontA

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA GetJobA ClosePrinter

advapi32

GetFileSecurityA SetFileSecurityA RegDeleteValueA RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegSetValueA RegCloseKey RegCreateKeyA

shell32

DragFinish DragQueryFileA ExtractIconA SHGetFileInfoA DragAcceptFiles

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CoRevokeClassObject OleIsCurrentClipboard CoFreeUnusedLibraries OleUninitialize OleDestroyMenuDescriptor OleCreateMenuDescriptor IsAccelerator OleTranslateAccelerator CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID CoTaskMemAlloc CoTaskMemFree OleFlushClipboard OleInitialize CoRegisterMessageFilter

oleaut32

VariantClear VariantInit SysAllocStringLen SysFreeString SysStringLen SysAllocStringByteLen VariantTimeToSystemTime SystemTimeToVariantTime OleCreateFontIndirect SafeArrayDestroy SysAllocString VariantCopy VariantChangeType

odbc32

ord5 ord51 ord50 ord45 ord44 ord68 ord43 ord59 ord13 ord18 ord46 ord12 ord19 ord11 ord49 ord48 ord8 ord20 ord16 ord3 ord14 ord9 ord15 ord1 ord2 ord10 ord41 ord17 ord4 ord72 ord54