emotet_exe_e5_2d612f40536a4c2f343bf5325d297fbc08e049a8a28892ce9b9db706e99200fd_2022-03-21__152159[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e5_2d612f40536a4c2f343bf5325d297fbc08e049a8a28892ce9b9db706e99200fd_2022-03-21__152159.exe
Size 1.0MB
Sample220321-ssf5nadce2
SHA256 2d612f40536a4c2f343bf5325d297fbc08e049a8a28892ce9b9db706e99200fd
MD5 484b10e6d0fad5629343668f7306cd83
SHA1 16c35b0e33739a6f57f99a1061045cc50a335350
SHA512 59ded5c48ceb8a27beb3d684009366498b45b3b91692863a7abf8ceac1612c4fdfddb3b937ee0e9941d8cf38541a940d051d9795a3c1380ae46be6cb3f0959cf
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e5_2d612f40536a4c2f343bf5325d297fbc08e049a8a28892ce9b9db706e99200fd_2022-03-21__152159.exe

.dll 1.0MB

emotet_exe_e5_2d612f40536a4c2f343bf5325d297fbc08e049a8a28892ce9b9db706e99200fd_2022-03-21__152159.exe

IMPHASH 570e13786e13464ca954b67524d1cbb1
SHA256 2d612f40536a4c2f343bf5325d297fbc08e049a8a28892ce9b9db706e99200fd
MD5 484b10e6d0fad5629343668f7306cd83
SHA1 16c35b0e33739a6f57f99a1061045cc50a335350
SHA512 59ded5c48ceb8a27beb3d684009366498b45b3b91692863a7abf8ceac1612c4fdfddb3b937ee0e9941d8cf38541a940d051d9795a3c1380ae46be6cb3f0959cf
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

185152

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TerminateProcess ExitThread CreateThread HeapReAlloc HeapSize HeapDestroy HeapCreate VirtualFree FatalAppExitA IsBadWritePtr SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW UnhandledExceptionFilter QueryPerformanceCounter GetCommandLineA GetCurrentProcessId GetSystemTimeAsFileTime SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeZoneInformation IsBadReadPtr IsBadCodePtr GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage SetConsoleCtrlHandler SetStdHandle GetLocaleInfoW SetEnvironmentVariableA VirtualQuery GetSystemInfo VirtualAlloc VirtualProtect HeapAlloc RtlUnwind HeapFree GetDiskFreeSpaceA GetTempFileNameA GetFileTime GetFileAttributesA SetFileAttributesA SetFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime SetErrorMode LocalLock LocalUnlock SystemTimeToFileTime FileTimeToSystemTime GetShortPathNameA CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetCurrentDirectoryA GetOEMCP GetCPInfo GlobalFlags TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc InterlockedIncrement DeleteCriticalSection InitializeCriticalSection RaiseException GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetCurrentThread lstrcmpA GetModuleFileNameA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA InterlockedDecrement GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom LoadLibraryA FreeLibrary lstrcatA lstrcmpW GetModuleHandleA GetProcAddress FreeResource SetLastError GlobalFree CopyFileA FindResourceA LoadResource LockResource SizeofResource MulDiv GlobalSize GlobalAlloc GlobalLock GlobalUnlock FormatMessageA lstrcpynA LocalFree ExitProcess GetLastError lstrlenA lstrcmpiA lstrcmpiW GetStringTypeExA GetStringTypeExW lstrlenW WideCharToMultiByte CompareStringA CompareStringW GetEnvironmentVariableA MultiByteToWideChar GetEnvironmentVariableW GetVersion GetThreadLocale GetLocaleInfoA GetACP GetVersionExA GetTickCount InterlockedExchange

user32

LockWindowUpdate GetSystemMenu SetParent SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorA GetTabbedTextExtentA SetRect MessageBeep IsClipboardFormatAvailable DestroyIcon DeleteMenu WaitMessage GetWindowThreadProcessId ReleaseCapture WindowFromPoint SetCapture DestroyMenu GetMenuItemInfoA GetDialogBaseUnits LoadCursorA GetSysColorBrush InflateRect GetMessageA TranslateMessage GetCursorPos ValidateRect ShowOwnedPopups SetCursor PostQuitMessage EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA wsprintfA MapVirtualKeyA GetKeyNameTextA GetDC ScrollWindowEx ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton ModifyMenuA EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA GetClassInfoExA GetClassNameA GetDCEx GetPropA RemovePropA SendDlgItemMessageA GetFocus SetFocus IsChild GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints ScrollWindow MessageBoxA TrackPopupMenuEx TrackPopupMenu GetKeyState SetScrollRange CharLowerW CharLowerA CharUpperW SetMenuItemBitmaps CharUpperA EnableWindow SendMessageA LoadBitmapA ReleaseDC InvalidateRect LoadIconA FillRect GetSysColor DrawIcon GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar IsWindowVisible UpdateWindow GetMenu PostMessageA AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetScrollInfo SetScrollInfo KillTimer SetTimer UnionRect IsRectEmpty LoadMenuA GetClassInfoA RegisterClassA UnregisterClassA SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect CopyRect UnpackDDElParam ReuseDDElParam LoadAcceleratorsA InsertMenuItemA SetPropA CreatePopupMenu GetClientRect GetSystemMetrics IsIconic RemoveMenu GetSubMenu GetMenuItemCount InsertMenuA GetMenuItemID AppendMenuA GetMenuStringA GetMenuState EndDialog GetNextDlgTabItem GetParent IsWindowEnabled GetDlgItem GetWindowLongA IsWindow PtInRect GetWindow GetDesktopWindow GetActiveWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow

gdi32

PlayMetaFile CreatePen ExtCreatePen CreateSolidBrush CreateHatchBrush CreateFontIndirectA SetRectRgn CombineRgn GetMapMode DPtoLP EnumMetaFile GetTextMetricsA GetCharWidthA StartPage EndPage SetAbortProc AbortDoc EndDoc StretchDIBits CreateFontA GetBkColor GetObjectType PlayMetaFileRecord SelectPalette GetStockObject CreatePatternBrush CreateDIBPatternBrushPt DeleteDC ExtSelectClipRgn PolyBezierTo PolylineTo PolyDraw ArcTo GetCurrentPositionEx ScaleWindowExtEx SetWindowExtEx OffsetWindowOrgEx GetPixel SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible PtVisible GetTextExtentPoint32A BitBlt GetWindowExtEx GetViewportExtEx SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC PatBlt CreateRectRgnIndirect CreateBitmap GetObjectA SetBkColor SetTextColor GetClipBox GetDCOrgEx CreateDCA CopyMetaFileA GetDeviceCaps CreateCompatibleDC CreateCompatibleBitmap StartDocA

comdlg32

PageSetupDlgA FindTextA GetOpenFileNameA GetSaveFileNameA CommDlgExtendedError PrintDlgA ReplaceTextA GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter GetJobA

advapi32

RegSetValueA RegOpenKeyA RegQueryValueExA RegOpenKeyExA RegDeleteKeyA RegEnumKeyA RegQueryValueA RegCreateKeyExA RegSetValueExA RegDeleteValueA RegCreateKeyA SetFileSecurityA GetFileSecurityA RegCloseKey

shell32

SHGetFileInfoA DragFinish DragQueryFileA ExtractIconA

comctl32

ImageList_GetIcon ImageList_AddMasked ImageList_Draw InitCommonControlsEx ord17 ord13 ImageList_Read ImageList_Write ord14 ImageList_Destroy ImageList_Create ImageList_LoadImageA ImageList_Merge ImageList_GetImageInfo

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

ole32

WriteClassStg OleRegGetUserType SetConvertStg CoTaskMemFree ReadFmtUserTypeStg ReadClassStg StringFromCLSID CoTreatAsClass CreateBindCtx CoTaskMemAlloc ReleaseStgMedium OleDuplicateData CoDisconnectObject CoCreateInstance StringFromGUID2 CLSIDFromString WriteFmtUserTypeStg

oleaut32

VariantClear VariantChangeType VariantInit SysAllocStringLen SysFreeString SysStringLen SysAllocStringByteLen SysStringByteLen SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SystemTimeToVariantTime SysAllocString SysReAllocStringLen VarDateFromStr VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromCy VarBstrFromDate

Name

.text

Size

548KB

Virtual Size

544KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

108KB

Virtual Size

105KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

4KB

Virtual Size

793B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

284KB

Virtual Size

282KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

60KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ