emotet_exe_e5_03bd4a92c7510ced62ceb13642804516f4e505ae9f96287b7bd38e89d9ecf3e7_2022-03-25__030348[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e5_03bd4a92c7510ced62ceb13642804516f4e505ae9f96287b7bd38e89d9ecf3e7_2022-03-25__030348.exe
Size 639KB
Sample220325-dklylsfacn
SHA256 03bd4a92c7510ced62ceb13642804516f4e505ae9f96287b7bd38e89d9ecf3e7
MD5 aac899f32269fcf7d9c64019c6dfc373
SHA1 473884b95eddfd2dc551920205c16dd2d9c8c3e5
SHA512 7670ad1b8d44f3d5748d5bbac7b807b3e0ad45292f3f0c6b969180a88b1f0adfb2f3ffaa98d44b579ca7de10d4329c8593b4a3d2f88228522e5d1e587c8ef1d8
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e5_03bd4a92c7510ced62ceb13642804516f4e505ae9f96287b7bd38e89d9ecf3e7_2022-03-25__030348.exe

.dll 639KB

emotet_exe_e5_03bd4a92c7510ced62ceb13642804516f4e505ae9f96287b7bd38e89d9ecf3e7_2022-03-25__030348.exe

IMPHASH 70b8cfa68ef2c7898ee65b9a0ce218ac
SHA256 03bd4a92c7510ced62ceb13642804516f4e505ae9f96287b7bd38e89d9ecf3e7
MD5 aac899f32269fcf7d9c64019c6dfc373
SHA1 473884b95eddfd2dc551920205c16dd2d9c8c3e5
SHA512 7670ad1b8d44f3d5748d5bbac7b807b3e0ad45292f3f0c6b969180a88b1f0adfb2f3ffaa98d44b579ca7de10d4329c8593b4a3d2f88228522e5d1e587c8ef1d8
MD5 SHA1 SHA512

Minor OS version

Major OS version

Entry point

230416

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationA GetFullPathNameA CreateFileA GetShortPathNameA GetCPInfo GetOEMCP FileTimeToSystemTime SystemTimeToFileTime SetErrorMode FileTimeToLocalFileTime LocalFileTimeToFileTime SetFileTime SetFileAttributesA GetFileAttributesA GetFileTime HeapFree RtlUnwind HeapAlloc VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery GetCommandLineA TerminateProcess ExitThread CreateThread HeapReAlloc HeapSize HeapDestroy HeapCreate VirtualFree FatalAppExitA FindFirstFileA SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW UnhandledExceptionFilter QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeZoneInformation IsBadReadPtr IsBadCodePtr GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage SetConsoleCtrlHandler SetStdHandle GetLocaleInfoW SetEnvironmentVariableA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc DeleteCriticalSection InitializeCriticalSection RaiseException GlobalFlags InterlockedDecrement InterlockedIncrement GetCurrentDirectoryA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA GlobalGetAtomNameA GlobalFindAtomA lstrcmpW FreeResource CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GlobalAddAtomA SetLastError GlobalFree CopyFileA MulDiv GlobalSize GlobalUnlock FormatMessageA lstrcpynA LocalFree GetCurrentThread GetCurrentThreadId GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA GetModuleFileNameA GetModuleHandleA GetProcAddress ConvertDefaultLocale EnumResourceLanguagesA lstrcatA WinExec lstrcpyA GetWindowsDirectoryA LoadLibraryA FreeLibrary LoadResource LockResource SizeofResource FindResourceA ExitProcess GetLastError lstrlenA lstrcmpiA lstrcmpiW GetStringTypeExA GetStringTypeExW lstrlenW WideCharToMultiByte CompareStringA CompareStringW GetEnvironmentVariableA MultiByteToWideChar GetEnvironmentVariableW GetVersion GetThreadLocale GetLocaleInfoA GetACP GetVersionExA IsBadWritePtr InterlockedExchange

user32

GetSysColorBrush DestroyIcon GetDialogBaseUnits GetMenuItemInfoA DestroyMenu FillRect wsprintfA ScrollWindowEx ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA SendDlgItemMessageA SetFocus IsChild GetWindowTextLengthA GetWindowTextA GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos LoadIconA MapWindowPoints ScrollWindow TrackPopupMenuEx TrackPopupMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar UpdateWindow DeleteMenu AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetScrollInfo GetClassInfoA RegisterClassA UnregisterClassA SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement CopyRect GetWindow GetDesktopWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow GetDlgItem GetNextDlgTabItem EndDialog SetMenuItemBitmaps GetFocus ModifyMenuA EnableMenuItem CharLowerW CharLowerA CharUpperW CharUpperA EnableWindow GetSysColor SendMessageA MessageBeep CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState PeekMessageA GetCursorPos WindowFromPoint EndPaint BeginPaint GetWindowDC ValidateRect MessageBoxA ClientToScreen GrayStringA DrawTextExA DrawTextA GetMenu TabbedTextOutA SetCapture RedrawWindow ReleaseCapture PtInRect GetClientRect SetCursor SetWindowLongA IsWindow InvalidateRect InflateRect ReleaseDC GetDC GetParent GetWindowRect CopyIcon LoadCursorA PostQuitMessage PostMessageA GetWindowLongA GetLastActivePopup IsWindowEnabled ShowOwnedPopups GetMenuState GetMenuStringA AppendMenuA GetMenuItemID InsertMenuA GetMenuItemCount GetSubMenu RemoveMenu SetScrollInfo

gdi32

GetCurrentPositionEx ArcTo PolyDraw PolylineTo PolyBezierTo ExtSelectClipRgn DeleteDC CreateDIBPatternBrushPt CreatePatternBrush CreateCompatibleDC SelectPalette PlayMetaFileRecord GetObjectType StartDocA PlayMetaFile CreatePen ExtCreatePen CreateSolidBrush CreateHatchBrush GetTextMetricsA CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode PatBlt DPtoLP ScaleWindowExtEx SetWindowExtEx OffsetWindowOrgEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible EnumMetaFile GetStockObject GetPixel BitBlt GetWindowExtEx GetViewportExtEx SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC SetBkColor SetTextColor GetClipBox GetDCOrgEx CreateBitmap CreateDCA CopyMetaFileA GetDeviceCaps GetTextExtentPoint32A GetObjectA CreateFontIndirectA PtVisible

comdlg32

GetOpenFileNameA GetSaveFileNameA GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegDeleteKeyA RegCreateKeyA RegDeleteValueA RegSetValueExA RegCreateKeyExA RegEnumKeyA RegCloseKey RegOpenKeyA RegSetValueA RegQueryValueExA RegOpenKeyExA RegQueryValueA

shell32

ExtractIconA SHGetFileInfoA ShellExecuteA

comctl32

ord17

shlwapi

PathFindExtensionA PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathIsUNCA

ole32

CoTreatAsClass StringFromCLSID ReadClassStg ReadFmtUserTypeStg CreateBindCtx WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree CoTaskMemAlloc ReleaseStgMedium OleDuplicateData CoDisconnectObject CoCreateInstance StringFromGUID2 CLSIDFromString OleRegGetUserType

oleaut32

VariantClear VariantChangeType VariantInit SysAllocStringLen SysFreeString SysStringLen SysAllocStringByteLen SysStringByteLen SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SystemTimeToVariantTime SysAllocString SysReAllocStringLen VarDateFromStr VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromCy VarBstrFromDate

Name

.text

Size

504KB

Virtual Size

501KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

60KB

Virtual Size

58KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

16KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

4KB

Virtual Size

793B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

172KB

Virtual Size

171KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

64KB

Virtual Size

62KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ