emotet_exe_e5_3afdd550f8b95da966a08ad154bfb24c0f8e655a2952313e7dc6fb70e27f3f98_2022-03-19__000953[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e5_3afdd550f8b95da966a08ad154bfb24c0f8e655a2952313e7dc6fb70e27f3f98_2022-03-19__000953.exe
Size 567KB
Sample220319-af6wfaggf7
SHA256 3afdd550f8b95da966a08ad154bfb24c0f8e655a2952313e7dc6fb70e27f3f98
MD5 8317ac1f022f74c055e8929e5305df23
SHA1 ea6481a2c77c0f0bb6b6997a9f5c49284e4df274
SHA512 911d173a32558c0c175440c5c7e36d6c68eda1209084d626f64231cba3307766e5704ae6cb742ec0a512769ad0f70008b81f5134616edd0fce85e2b7c4fc49e7
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e5_3afdd550f8b95da966a08ad154bfb24c0f8e655a2952313e7dc6fb70e27f3f98_2022-03-19__000953.exe

.dll 567KB

emotet_exe_e5_3afdd550f8b95da966a08ad154bfb24c0f8e655a2952313e7dc6fb70e27f3f98_2022-03-19__000953.exe

IMPHASH c7be10fff3b5624b64714e5733abbf40
SHA256 3afdd550f8b95da966a08ad154bfb24c0f8e655a2952313e7dc6fb70e27f3f98
MD5 8317ac1f022f74c055e8929e5305df23
SHA1 ea6481a2c77c0f0bb6b6997a9f5c49284e4df274
SHA512 911d173a32558c0c175440c5c7e36d6c68eda1209084d626f64231cba3307766e5704ae6cb742ec0a512769ad0f70008b81f5134616edd0fce85e2b7c4fc49e7
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

229804

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineA RtlUnwind Sleep RaiseException HeapReAlloc HeapSize VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate HeapDestroy VirtualFree GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW HeapAlloc QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage GetTimeZoneInformation GetLocaleInfoA GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA HeapFree GetTickCount GetFileTime GetFileSizeEx GetFileAttributesW FileTimeToLocalFileTime FileTimeToSystemTime CreateFileW GetFullPathNameW GetVolumeInformationW FindFirstFileW FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GetThreadLocale InterlockedIncrement TlsFree LocalReAlloc TlsSetValue TlsAlloc GlobalHandle GlobalReAlloc TlsGetValue LocalAlloc WritePrivateProfileStringW GlobalFlags EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection GetModuleHandleA GlobalFindAtomW GetVersionExW CompareStringW LoadLibraryA GetVersionExA FormatMessageW LocalFree MulDiv InterlockedDecrement lstrlenA lstrlenW GlobalUnlock CloseHandle FreeResource GlobalFree GlobalAddAtomW GetCurrentProcessId GetLastError SetLastError GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesW GetModuleFileNameW lstrcmpA GetLocaleInfoW LoadLibraryW WideCharToMultiByte CompareStringA MultiByteToWideChar InterlockedExchange GlobalLock lstrcmpW GlobalAlloc FreeLibrary GetModuleHandleW GetProcAddress LockResource SizeofResource LoadResource FindResourceW GetEnvironmentStringsW ExitProcess

user32

RegisterClipboardFormatW PostThreadMessageW CharUpperW ReleaseCapture SetCapture LoadCursorW GetSysColorBrush EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringW DrawTextExW DrawTextW TabbedTextOutW ShowWindow MoveWindow SetWindowTextW IsDialogMessageW RegisterWindowMessageW SendDlgItemMessageW SendDlgItemMessageA WinHelpW IsChild GetCapture GetClassLongW SetPropW GetPropW RemovePropW GetForegroundWindow GetMessageTime GetMessagePos MapWindowPoints SetMenu SetForegroundWindow UpdateWindow CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx ScreenToClient EqualRect PtInRect GetDlgCtrlID DefWindowProcW CallWindowProcW GetMenu SetWindowLongW OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetSysColor GetSystemMetrics DestroyMenu CopyRect GetMenuItemID GetMenuItemCount GetSubMenu EnableWindow SendMessageW AppendMenuW LoadIconW UnhookWindowsHookEx GetWindowTextW SetFocus GetDesktopWindow SetActiveWindow CreateDialogIndirectParamW DestroyWindow IsWindow GetDlgItem GetNextDlgTabItem MessageBeep GetNextDlgGroupItem InvalidateRgn SetRect IsRectEmpty CopyAcceleratorTableW GetTopWindow CharNextW GetSystemMenu InvalidateRect GetClientRect GetWindowRect CheckMenuItem EnableMenuItem GetMenuState ModifyMenuW GetParent GetFocus LoadBitmapW GetMenuCheckMarkDimensions SetMenuItemBitmaps PostQuitMessage PostMessageW SetCursor MessageBoxW IsWindowEnabled GetLastActivePopup GetWindowLongW GetWindowThreadProcessId SetWindowPos MapDialogRect SetWindowContextHelpId GetWindow ValidateRect GetCursorPos PeekMessageW GetKeyState IsWindowVisible GetActiveWindow DispatchMessageW TranslateMessage GetMessageW CallNextHookEx SetWindowsHookExW EndDialog GetClassNameW

gdi32

ExtSelectClipRgn DeleteDC GetStockObject GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetMapMode SetWindowExtEx ScaleWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape TextOutW RectVisible PtVisible CreateBitmap GetWindowExtEx GetViewportExtEx DeleteObject SetMapMode RestoreDC SaveDC SetBkColor SetTextColor GetClipBox ExtTextOutW GetObjectW GetDeviceCaps

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW ClosePrinter OpenPrinterW

advapi32

RegSetValueExW RegCreateKeyExW RegQueryValueW RegOpenKeyW RegEnumKeyW RegDeleteKeyW RegOpenKeyExW RegQueryValueExW RegCloseKey

shlwapi

PathFindFileNameW PathStripToRootW PathIsUNCW PathFindExtensionW

oledlg

OleUIBusyW

ole32

CoRevokeClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes OleIsCurrentClipboard CoTaskMemAlloc CoTaskMemFree CLSIDFromString CLSIDFromProgID OleFlushClipboard CoRegisterMessageFilter CoGetClassObject

oleaut32

SysAllocStringLen SysStringLen VariantClear VariantChangeType VariantInit OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysFreeString