emotet_exe_e5_1d5b60682f435a961fade41bd440d61398e987f9d519f1cae9eb26c7aa79d58a_2022-03-21__184207[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e5_1d5b60682f435a961fade41bd440d61398e987f9d519f1cae9eb26c7aa79d58a_2022-03-21__184207.exe
Size 790KB
Sample220321-xcw86adea7
SHA256 1d5b60682f435a961fade41bd440d61398e987f9d519f1cae9eb26c7aa79d58a
MD5 3561f51c42a4081e727f0e1a654dd620
SHA1 79571896a8242a7c125274419bb1761ccc5c60ec
SHA512 97ea9a566366ae7e88c3ab58d92267ec4e3ade5d8129f3bb06771eb8ab59681c41bd9034000aece5655f9ad52950d2a4c07c33da3c320f318f7941e5961f0aa2
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e5_1d5b60682f435a961fade41bd440d61398e987f9d519f1cae9eb26c7aa79d58a_2022-03-21__184207.exe

.dll 790KB

emotet_exe_e5_1d5b60682f435a961fade41bd440d61398e987f9d519f1cae9eb26c7aa79d58a_2022-03-21__184207.exe

IMPHASH e33cd8dc97d96e317214c44457f3bf92
SHA256 1d5b60682f435a961fade41bd440d61398e987f9d519f1cae9eb26c7aa79d58a
MD5 3561f51c42a4081e727f0e1a654dd620
SHA1 79571896a8242a7c125274419bb1761ccc5c60ec
SHA512 97ea9a566366ae7e88c3ab58d92267ec4e3ade5d8129f3bb06771eb8ab59681c41bd9034000aece5655f9ad52950d2a4c07c33da3c320f318f7941e5961f0aa2
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

316020

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapFree HeapAlloc GetCommandLineA Sleep ExitThread CreateThread RaiseException VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate HeapDestroy VirtualFree FatalAppExitA GetStdHandle SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings RtlUnwind GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime SetConsoleCtrlHandler InitializeCriticalSectionAndSpinCount GetACP IsValidCodePage GetTimeZoneInformation GetConsoleCP GetConsoleMode GetLocaleInfoW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA GetFileTime GetFileSizeEx GetFileAttributesA SetFileAttributesA SetFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime SetErrorMode SystemTimeToFileTime FileTimeToSystemTime GetModuleHandleW GetAtomNameA GetOEMCP GetCPInfo CreateFileA GetShortPathNameA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile lstrcmpiA GetThreadLocale GetStringTypeExA DeleteFileA MoveFileA InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags GetCurrentDirectoryA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA CopyFileA GlobalSize FormatMessageA LocalFree lstrlenW MulDiv InterlockedDecrement GetModuleFileNameW lstrlenA GlobalGetAtomNameA GlobalFindAtomA MultiByteToWideChar lstrcmpW GetVersionExA GlobalUnlock GlobalFree FreeResource GetCurrentProcessId GetLastError SetLastError GlobalAddAtomA CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetModuleFileNameA GetLocaleInfoA LoadLibraryA CompareStringA InterlockedExchange GlobalLock lstrcmpA GlobalAlloc FreeLibrary GetModuleHandleA GetProcAddress WideCharToMultiByte LoadResource LockResource SizeofResource FindResourceA FreeEnvironmentStringsW ExitProcess

user32

UnregisterClassA SetRectEmpty InvalidateRect TranslateAcceleratorA BringWindowToTop CreatePopupMenu InsertMenuItemA LoadAcceleratorsA GetMenuBarInfo LoadMenuA ReuseDDElParam UnpackDDElParam SetRect SetTimer KillTimer GetKeyNameTextA MapVirtualKeyA IsRectEmpty SetParent UnionRect GetDCEx LockWindowUpdate EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA FillRect GetMenuStringA DestroyMenu GetMenuItemInfoA InflateRect ScrollWindowEx ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow BeginDeferWindowPos GetDialogBaseUnits GetTopWindow GetMessageTime GetMessagePos MapWindowPoints ScrollWindow TrackPopupMenuEx TrackPopupMenu SetMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar UpdateWindow GetSubMenu GetMenuItemID GetMenuItemCount CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetScrollInfo SetScrollInfo CopyRect PtInRect SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA GetMenu SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindow GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow EnableWindow LoadIconA AppendMenuA GetSystemMenu IsWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetWindowLongA GetLastActivePopup IsWindowEnabled MessageBoxA ShowOwnedPopups SetCursor SetWindowsHookExA CallNextHookEx CharUpperA DestroyIcon GetSysColorBrush WaitMessage ReleaseCapture LoadCursorA WindowFromPoint SetCapture DeleteMenu InsertMenuA EndDeferWindowPos RemoveMenu SendMessageA GetSystemMetrics DrawIcon IsIconic GetClientRect DdeInitializeA DdeCreateStringHandleA DdeFreeStringHandle DdeDisconnect DdeConnect DdeUninitialize DdeNameService DdeFreeDataHandle DdeUnaccessData DdeAccessData DdeClientTransaction PostQuitMessage PostMessageA CheckMenuItem EnableMenuItem GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState PeekMessageA GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus GetParent ModifyMenuA GetMenuState UnhookWindowsHookEx

gdi32

PolyDraw PolylineTo PolyBezierTo ExtSelectClipRgn DeleteDC CreateDIBPatternBrushPt CreatePatternBrush GetStockObject SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile GetDeviceCaps CreatePen ExtCreatePen ArcTo CreateHatchBrush CopyMetaFileA CreateDCA GetTextMetricsA GetCharWidthA CreateFontA StretchDIBits CreateCompatibleBitmap CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode PatBlt DPtoLP GetBkColor ScaleWindowExtEx GetCurrentPositionEx SetWindowExtEx OffsetWindowOrgEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape PtVisible TextOutA CreateSolidBrush CreateBitmap StartDocA GetPixel GetWindowExtEx GetViewportExtEx SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode ModifyWorldTransform SetWorldTransform SetGraphicsMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC GetTextExtentPoint32A ExtTextOutA BitBlt CreateCompatibleDC CreateFontIndirectA GetObjectA SetBkColor SetTextColor GetClipBox GetDCOrgEx RectVisible

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegDeleteValueA RegSetValueExA RegCreateKeyExA RegSetValueA RegQueryValueA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegCloseKey RegCreateKeyA

shell32

ExtractIconA DragFinish DragQueryFileA SHGetFileInfoA

shlwapi

PathFindFileNameA PathStripToRootA PathIsUNCA PathFindExtensionA PathRemoveExtensionA PathRemoveFileSpecW

ole32

StringFromGUID2 CoDisconnectObject OleDuplicateData CoTaskMemAlloc ReleaseStgMedium CreateBindCtx CoTreatAsClass CoCreateInstance ReadClassStg ReadFmtUserTypeStg OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree CLSIDFromString CoUninitialize CoInitializeEx StringFromCLSID

oleaut32

VariantClear VariantChangeType VariantInit SysAllocStringLen SysStringLen SysFreeString SysAllocStringByteLen SysStringByteLen RegisterTypeLi LoadTypeLi LoadRegTypeLi SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SystemTimeToVariantTime SysReAllocStringLen VarDateFromStr VarBstrFromCy VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromDate