emotet_exe_e5_fad695181cd5fcf9288b4b4b0a858973929f8e7cb4da582dfc6f07689c98888f_2022-03-23__180940[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e5_fad695181cd5fcf9288b4b4b0a858973929f8e7cb4da582dfc6f07689c98888f_2022-03-23__180940.exe
Size 976KB
Sample220323-wr2xhsedgl
SHA256 fad695181cd5fcf9288b4b4b0a858973929f8e7cb4da582dfc6f07689c98888f
MD5 e2d4873778c28168d2856de0de540f97
SHA1 de7101f0ddd4f57d592232eba6783721365a55a8
SHA512 61e121041f4bba762608746575fdc9c9fa1122256b8146689a6a66776fd951842ad24bb4de585712e86c60f1815131b86e6dc04544465ae4188608003b0fdfad
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e5_fad695181cd5fcf9288b4b4b0a858973929f8e7cb4da582dfc6f07689c98888f_2022-03-23__180940.exe

.dll 976KB

emotet_exe_e5_fad695181cd5fcf9288b4b4b0a858973929f8e7cb4da582dfc6f07689c98888f_2022-03-23__180940.exe

IMPHASH fba6073121233dddcde515a679fb52c1
SHA256 fad695181cd5fcf9288b4b4b0a858973929f8e7cb4da582dfc6f07689c98888f
MD5 e2d4873778c28168d2856de0de540f97
SHA1 de7101f0ddd4f57d592232eba6783721365a55a8
SHA512 61e121041f4bba762608746575fdc9c9fa1122256b8146689a6a66776fd951842ad24bb4de585712e86c60f1815131b86e6dc04544465ae4188608003b0fdfad
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

357844

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetShortPathNameA CreateFileA GetCPInfo GetOEMCP GetAtomNameA FileTimeToSystemTime SystemTimeToFileTime SetErrorMode FileTimeToLocalFileTime LocalFileTimeToFileTime SetFileTime SetFileAttributesA GetFileAttributesA GetFileTime HeapFree RtlUnwind VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapAlloc HeapReAlloc GetCommandLineA GetProcessHeap RaiseException ExitThread CreateThread HeapSize HeapDestroy HeapCreate VirtualFree FatalAppExitA TerminateProcess UnhandledExceptionFilter GetFullPathNameA IsDebuggerPresent GetStdHandle Sleep GetACP SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime SetConsoleCtrlHandler GetTimeZoneInformation LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetThreadLocale GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GlobalFlags GetCurrentDirectoryA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GetModuleFileNameW InterlockedDecrement InterlockedIncrement GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA FreeResource GetCurrentProcessId GlobalAddAtomA CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetCurrentThread GetCurrentThreadId ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA lstrcmpA GlobalDeleteAtom GetModuleHandleA GetProcAddress SetLastError GlobalFree CopyFileA GlobalSize GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv lstrcatA WinExec lstrcpyA GetWindowsDirectoryA LoadLibraryA FreeLibrary LoadResource LockResource SizeofResource FindResourceA ExitProcess GetLastError lstrlenA lstrcmpiA lstrcmpiW GetStringTypeExA GetStringTypeExW lstrlenW WideCharToMultiByte CompareStringA CompareStringW GetEnvironmentVariableA MultiByteToWideChar GetEnvironmentVariableW GetVersion SetUnhandledExceptionFilter InterlockedExchange

user32

DestroyIcon GetDialogBaseUnits GetMenuItemInfoA DestroyMenu UnregisterClassA FillRect WindowFromPoint ScrollWindowEx ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton RegisterWindowMessageA LoadIconA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints ScrollWindow TrackPopupMenuEx TrackPopupMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar UpdateWindow GetMenu CreateWindowExA DeleteMenu GetClassInfoA RegisterClassA AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos CopyRect GetScrollInfo SetScrollInfo GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindow GetDesktopWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetWindowLongA GetLastActivePopup IsWindowEnabled MessageBoxA ShowOwnedPopups SetWindowsHookExA CallNextHookEx CharLowerW CharLowerA CharUpperW CharUpperA EnableWindow GetSysColor GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState PeekMessageA GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus GetSysColorBrush EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA GetClassInfoExA TabbedTextOutA SendMessageA MessageBeep SetCapture RedrawWindow ReleaseCapture PtInRect GetClientRect SetCursor SetWindowLongA IsWindow InvalidateRect InflateRect ReleaseDC GetDC GetParent GetWindowRect CopyIcon LoadCursorA ModifyMenuA EnableMenuItem CheckMenuItem PostMessageA PostQuitMessage GetMenuState GetMenuStringA AppendMenuA GetMenuItemID InsertMenuA GetMenuItemCount GetSubMenu RemoveMenu SetWindowPlacement

gdi32

ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetCurrentPositionEx GetViewportExtEx ArcTo PolyDraw PolylineTo PolyBezierTo ExtSelectClipRgn DeleteDC CreateDIBPatternBrushPt CreatePatternBrush CreateCompatibleDC SetViewportExtEx PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile CreatePen ExtCreatePen CreateSolidBrush CreateHatchBrush GetTextMetricsA CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode PatBlt DPtoLP OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible PtVisible StartDocA GetPixel BitBlt SelectPalette GetStockObject SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode ModifyWorldTransform SetWorldTransform SetGraphicsMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC SetBkColor SetTextColor GetClipBox GetDCOrgEx CreateBitmap CreateDCA CopyMetaFileA GetDeviceCaps GetTextExtentPoint32A GetObjectA CreateFontIndirectA GetWindowExtEx

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegDeleteValueA RegSetValueExA RegCreateKeyExA RegEnumKeyA RegDeleteKeyA RegQueryValueExA RegOpenKeyA RegSetValueA RegOpenKeyExA RegQueryValueA RegCloseKey RegCreateKeyA

shell32

ExtractIconA SHGetFileInfoA ShellExecuteA

shlwapi

PathFindExtensionA PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathIsUNCA

ole32

ReleaseStgMedium CreateBindCtx CoTreatAsClass StringFromCLSID ReadClassStg CoTaskMemAlloc OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree OleDuplicateData CoDisconnectObject CoCreateInstance StringFromGUID2 CLSIDFromString ReadFmtUserTypeStg

oleaut32

VariantClear VariantChangeType VariantInit SysAllocStringLen SysStringLen SysFreeString SysAllocStringByteLen SysStringByteLen SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SystemTimeToVariantTime SysReAllocStringLen VarDateFromStr VarBstrFromCy VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromDate

Name

.text

Size

616KB

Virtual Size

612KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

80KB

Virtual Size

77KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

12KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

16KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

4KB

Virtual Size

793B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

176KB

Virtual Size

174KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

68KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ