emotet_exe_e5_44f0b980dde78bc006e3e49bc751af5c745caaaead151a806e7c909e0cc3678b_2022-03-22__035950[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e5_44f0b980dde78bc006e3e49bc751af5c745caaaead151a806e7c909e0cc3678b_2022-03-22__035950.exe
Size 924KB
Sample220322-eknymsagan
SHA256 44f0b980dde78bc006e3e49bc751af5c745caaaead151a806e7c909e0cc3678b
MD5 b9a6aadf63c3f5af69340410791cdab6
SHA1 826f758dc69f787e0957710a6b8f86d2dfba4d55
SHA512 79457122ceee97ee75493c6548d328b1a5550d15b3e2b603c412ea63e32f8b2a92304d8b838978b7b20a160bc415b42fdd397c30f991ac5c82084feb5765396e
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e5_44f0b980dde78bc006e3e49bc751af5c745caaaead151a806e7c909e0cc3678b_2022-03-22__035950.exe

.dll 924KB

emotet_exe_e5_44f0b980dde78bc006e3e49bc751af5c745caaaead151a806e7c909e0cc3678b_2022-03-22__035950.exe

IMPHASH 517064f74bf7f14cec170e0f6bcbfb6f
SHA256 44f0b980dde78bc006e3e49bc751af5c745caaaead151a806e7c909e0cc3678b
MD5 b9a6aadf63c3f5af69340410791cdab6
SHA1 826f758dc69f787e0957710a6b8f86d2dfba4d55
SHA512 79457122ceee97ee75493c6548d328b1a5550d15b3e2b603c412ea63e32f8b2a92304d8b838978b7b20a160bc415b42fdd397c30f991ac5c82084feb5765396e
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

142708

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualQuery RtlUnwind GetSystemTimeAsFileTime GetTimeFormatA GetDateFormatA GetCommandLineA HeapReAlloc TerminateProcess ExitThread CreateThread SetStdHandle GetFileType HeapSize FatalAppExitA HeapDestroy HeapCreate VirtualFree IsBadWritePtr GetTimeZoneInformation SetHandleCount GetStdHandle GetSystemInfo FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW UnhandledExceptionFilter QueryPerformanceCounter GetCurrentProcessId SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW IsBadReadPtr IsBadCodePtr GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage SetConsoleCtrlHandler SetEnvironmentVariableA GetLocaleInfoW VirtualAlloc VirtualProtect HeapFree HeapAlloc GetDiskFreeSpaceA GetTempFileNameA LocalLock LocalUnlock GetTickCount SetErrorMode GetFileTime GetFileAttributesA SetFileAttributesA SetFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime GetShortPathNameA CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetCurrentDirectoryA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA GetOEMCP GetCPInfo GlobalFlags SystemTimeToFileTime FileTimeToSystemTime TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc InterlockedIncrement DeleteCriticalSection InitializeCriticalSection RaiseException InterlockedDecrement CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetCurrentThread lstrcmpA GetModuleFileNameA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom FreeLibrary lstrcatA lstrcmpW GetModuleHandleA SetLastError GlobalFree CopyFileA MulDiv GlobalSize GlobalAlloc GlobalLock GlobalUnlock FormatMessageA lstrcpynA LocalFree CreateDirectoryA ExitProcess LoadLibraryA GetProcAddress GetStringTypeExW GetStringTypeExA GetEnvironmentVariableW GetEnvironmentVariableA CompareStringW CompareStringA lstrlenA lstrcmpiW lstrlenW lstrcmpiA GetVersion FindResourceA LoadResource LockResource SizeofResource GetLastError WideCharToMultiByte MultiByteToWideChar GetVersionExA GetThreadLocale GetLocaleInfoA GetACP GetStartupInfoA InterlockedExchange

user32

RegisterClipboardFormatA GetKeyNameTextA MapVirtualKeyA UnionRect PostThreadMessageA IsClipboardFormatAvailable GetTabbedTextExtentA GetDCEx LockWindowUpdate SetParent InvalidateRgn CopyAcceleratorTableA SetRect IsRectEmpty CharNextA DestroyIcon DeleteMenu WaitMessage GetWindowThreadProcessId ReleaseCapture WindowFromPoint SetCapture GetDialogBaseUnits GetSysColorBrush wsprintfA DestroyMenu GetMenuItemInfoA InflateRect SetWindowContextHelpId MapDialogRect GetMessageA TranslateMessage GetCursorPos ValidateRect ShowOwnedPopups SetCursor PostQuitMessage GetDesktopWindow GetActiveWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog SetMenuItemBitmaps ModifyMenuA EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions ScrollWindowEx IsWindowEnabled ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA FillRect LoadMenuA WinHelpA GetCapture CreateWindowExA CallNextHookEx GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA SendDlgItemMessageA GetFocus IsWindow SetFocus IsChild GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints ScrollWindow MessageBoxA TrackPopupMenuEx TrackPopupMenu GetKeyState SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar IsWindowVisible GetMenu AdjustWindowRectEx GetParent ScreenToClient EqualRect DeferWindowPos GetScrollInfo SetScrollInfo GetClassInfoA RegisterClassA UnregisterClassA SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA GetWindowLongA SetWindowLongA UnpackDDElParam ReuseDDElParam LoadAcceleratorsA InsertMenuItemA CreatePopupMenu SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement CopyRect PtInRect GetWindow GetMenuState GetMenuStringA GetMenuItemID InsertMenuA SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorA RegisterWindowMessageA GetNextDlgGroupItem GetMenuItemCount GetSubMenu RemoveMenu LoadCursorA UpdateWindow LoadBitmapA MessageBeep GetSystemMetrics LoadIconA GetClientRect IsIconic GetSystemMenu SendMessageA AppendMenuA DrawIcon GetWindowRect GetSysColor EnableWindow KillTimer SetTimer InvalidateRect PostMessageA CharUpperW CharUpperA CharLowerW CharLowerA SetWindowsHookExA

gdi32

PlayMetaFile CreatePen ExtCreatePen CreateHatchBrush CreateFontIndirectA GetTextExtentPoint32A CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode PatBlt DPtoLP GetTextMetricsA GetBkColor GetTextColor GetRgnBox CreateCompatibleBitmap StretchDIBits GetCharWidthA EnumMetaFile EndPage SetAbortProc AbortDoc EndDoc RectVisible PtVisible StartDocA GetPixel GetWindowExtEx GetViewportExtEx SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection SetMapperFlags GetObjectType PlayMetaFileRecord TextOutA SelectPalette GetStockObject CreateBitmap CreatePatternBrush CreateDIBPatternBrushPt DeleteDC ExtSelectClipRgn PolyBezierTo PolylineTo PolyDraw ArcTo GetCurrentPositionEx ScaleWindowExtEx SetWindowExtEx OffsetWindowOrgEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape StartPage CreateSolidBrush SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC SetBkColor SetTextColor GetClipBox GetDCOrgEx CreateDCA CopyMetaFileA GetDeviceCaps BitBlt CreateCompatibleDC GetObjectA CreateFontA ExtTextOutA

comdlg32

ReplaceTextA PrintDlgA PageSetupDlgA FindTextA GetOpenFileNameA CommDlgExtendedError GetFileTitleA GetSaveFileNameA

winspool.drv

ClosePrinter GetJobA OpenPrinterA DocumentPropertiesA

advapi32

SetFileSecurityA RegSetValueA RegOpenKeyA RegQueryValueExA RegOpenKeyExA RegDeleteKeyA RegEnumKeyA RegQueryValueA RegCreateKeyExA RegSetValueExA RegDeleteValueA GetFileSecurityA RegCloseKey RegCreateKeyA

shell32

SHGetFileInfoA DragFinish DragQueryFileA ExtractIconA

comctl32

ord17 ImageList_Draw ImageList_GetImageInfo ord13 ImageList_Read ImageList_Write ord14 ImageList_Destroy ImageList_Create ImageList_LoadImageA ImageList_Merge

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

StringFromGUID2 CoCreateInstance CoDisconnectObject CLSIDFromString CLSIDFromProgID OleDuplicateData ReleaseStgMedium CoTaskMemAlloc CoGetClassObject CoTreatAsClass StringFromCLSID ReadClassStg ReadFmtUserTypeStg OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal OleRun OleUninitialize CoFreeUnusedLibraries CreateStreamOnHGlobal CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard OleSetClipboard CoRevokeClassObject CoRegisterClassObject CreateBindCtx OleInitialize

oleaut32

LoadTypeLi OleCreateFontIndirect VarBstrFromDate VarBstrFromCy VarCyFromStr VarDecFromStr VarBstrFromDec VarDateFromStr SysReAllocStringLen SysAllocString SystemTimeToVariantTime VariantTimeToSystemTime SafeArrayDestroyDescriptor SafeArrayDestroyData SafeArrayDestroy SafeArrayUnlock SafeArrayLock SafeArrayPutElement SafeArrayPtrOfIndex SafeArrayGetElement SafeArrayCopy SafeArrayAllocDescriptor SafeArrayAllocData VariantCopy SafeArrayRedim SafeArrayCreate SafeArrayGetDim SafeArrayGetElemsize SafeArrayGetLBound SafeArrayGetUBound SafeArrayAccessData SafeArrayUnaccessData SysAllocStringLen VariantInit VariantChangeType VariantClear SysStringByteLen SysAllocStringByteLen SysStringLen SysFreeString

winmm

PlaySoundA

Name

.text

Size

556KB

Virtual Size

555KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

112KB

Virtual Size

111KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

20KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

20KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

4KB

Virtual Size

793B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

168KB

Virtual Size

166KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ