emotet_exe_e4_5cd9aa6b258f844b4b49dc99e2794ec81bb29adbc887d2664d00a3500fb54703_2022-03-27__000433[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e4_5cd9aa6b258f844b4b49dc99e2794ec81bb29adbc887d2664d00a3500fb54703_2022-03-27__000433.exe
Size 640KB
Sample220327-adj9naahe9
SHA256 5cd9aa6b258f844b4b49dc99e2794ec81bb29adbc887d2664d00a3500fb54703
MD5 4fa62e4bcb3fe70d193c4bd0ac752cf2
SHA1 8392dbd9df1c32d6db043e938ac0ed35828164b5
SHA512 a0dd119b69b8440fec4fa262c1bbb830596add03ffae6440556f45a3b96ea854bc3704581cfa7ae6304eea1e8e1b10452ca20d6eb0f700ce0aafe77249a88582
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_5cd9aa6b258f844b4b49dc99e2794ec81bb29adbc887d2664d00a3500fb54703_2022-03-27__000433.exe

.dll 640KB

emotet_exe_e4_5cd9aa6b258f844b4b49dc99e2794ec81bb29adbc887d2664d00a3500fb54703_2022-03-27__000433.exe

IMPHASH d63ab94f4bb6b5d2f0f6092bf07e00ac
SHA256 5cd9aa6b258f844b4b49dc99e2794ec81bb29adbc887d2664d00a3500fb54703
MD5 4fa62e4bcb3fe70d193c4bd0ac752cf2
SHA1 8392dbd9df1c32d6db043e938ac0ed35828164b5
SHA512 a0dd119b69b8440fec4fa262c1bbb830596add03ffae6440556f45a3b96ea854bc3704581cfa7ae6304eea1e8e1b10452ca20d6eb0f700ce0aafe77249a88582
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

70428

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RtlUnwind GetSystemTimeAsFileTime GetCommandLineA TerminateProcess HeapReAlloc HeapSize HeapDestroy HeapCreate VirtualFree IsBadWritePtr SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW VirtualQuery QueryPerformanceCounter GetCurrentProcessId SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeZoneInformation IsBadReadPtr IsBadCodePtr SetStdHandle SetEnvironmentVariableA GetSystemInfo VirtualAlloc VirtualProtect HeapFree HeapAlloc GetTickCount SystemTimeToFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime FileTimeToSystemTime GetOEMCP GetCPInfo GetShortPathNameA CreateFileA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetCurrentDirectoryA GlobalFlags TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc InterlockedIncrement InterlockedDecrement DeleteCriticalSection InitializeCriticalSection RaiseException GetDiskFreeSpaceA GetFullPathNameA GetTempFileNameA GetFileTime SetFileTime GetFileAttributesA GlobalGetAtomNameA GlobalFindAtomA lstrcatA lstrcmpW GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA CloseHandle GlobalAddAtomA GetCurrentThread GetCurrentThreadId FreeLibrary GlobalDeleteAtom lstrcmpA GetModuleFileNameA GetModuleHandleA GetProcAddress ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA LoadLibraryA FreeResource SetLastError GlobalFree FindResourceA LoadResource LockResource SizeofResource MulDiv GlobalAlloc GlobalLock GlobalUnlock FormatMessageA lstrcpynA LocalFree ExitProcess GetStringTypeExA CompareStringW CompareStringA lstrlenA lstrcmpiA GetVersion GetLastError WideCharToMultiByte MultiByteToWideChar GetVersionExA GetThreadLocale GetLocaleInfoA GetACP UnhandledExceptionFilter InterlockedExchange

user32

KillTimer WindowFromPoint GetDCEx LockWindowUpdate RegisterClipboardFormatA PostThreadMessageA SetRect CharNextA DestroyIcon EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA FillRect LoadCursorA GetSysColorBrush SetParent GetSystemMenu DeleteMenu IsRectEmpty IsZoomed GetDC ReleaseDC LoadMenuA DestroyMenu UnpackDDElParam ReuseDDElParam ReleaseCapture LoadAcceleratorsA InsertMenuItemA CreatePopupMenu SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorA InvalidateRect RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA IsChild GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos LoadIconA MapWindowPoints TrackPopupMenu SetForegroundWindow SetTimer GetClientRect GetMenu GetSysColor AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetClassInfoA RegisterClassA UnregisterClassA DefWindowProcA CallWindowProcA OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect CopyRect PtInRect GetWindow SetWindowContextHelpId MapDialogRect wsprintfA GetWindowTextLengthA GetWindowTextA SetWindowPos CharUpperA UpdateWindow EnableWindow SendMessageA GetClassInfoExA GetSubMenu GetMenuItemCount InsertMenuA GetMenuItemID AppendMenuA SetFocus ShowWindow MoveWindow SetWindowLongA GetDlgCtrlID SetWindowTextA IsDialogMessageA SendDlgItemMessageA GetMenuItemInfoA InflateRect SetMenuItemBitmaps GetFocus ModifyMenuA EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage MessageBeep GetNextDlgGroupItem SetCapture InvalidateRgn CopyAcceleratorTableA GetMenuStringA GetMenuState EndDialog GetNextDlgTabItem GetParent IsWindowEnabled GetDlgItem GetWindowLongA IsWindow DestroyWindow CreateDialogIndirectParamA GetSystemMetrics SetActiveWindow GetActiveWindow GetDesktopWindow PostQuitMessage PostMessageA SetCursor ShowOwnedPopups GetLastActivePopup MessageBoxA ValidateRect GetCursorPos PeekMessageA GetKeyState IsWindowVisible DispatchMessageA

gdi32

CreateSolidBrush CreateFontIndirectA GetBkColor GetTextColor GetStockObject GetRgnBox PatBlt SetRectRgn CombineRgn GetMapMode CreatePatternBrush ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx Escape ExtTextOutA TextOutA RectVisible PtVisible GetPixel BitBlt GetWindowExtEx CreateRectRgnIndirect GetDeviceCaps CreateRectRgn SelectClipRgn IntersectClipRect ExcludeClipRect SetMapMode SetBkMode RestoreDC SaveDC GetTextExtentPoint32A GetTextMetricsA CreateFontA GetCharWidthA DeleteObject SelectObject StretchDIBits DeleteDC CreateCompatibleDC CreateCompatibleBitmap GetObjectA SetBkColor SetTextColor GetClipBox CreateBitmap GetViewportExtEx

comdlg32

GetSaveFileNameA GetFileTitleA GetOpenFileNameA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

GetFileSecurityA RegSetValueA RegOpenKeyA RegQueryValueExA RegOpenKeyExA RegDeleteKeyA RegEnumKeyA RegQueryValueA RegCreateKeyExA RegSetValueExA RegDeleteValueA RegCreateKeyA RegCloseKey SetFileSecurityA

shell32

DragQueryFileA ExtractIconA SHGetFileInfoA DragFinish

comctl32

ord17 ImageList_Draw ImageList_GetImageInfo ImageList_Destroy

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID CoTaskMemFree OleUninitialize CoFreeUnusedLibraries CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject CoTaskMemAlloc OleInitialize

oleaut32

SysAllocStringLen VariantClear VariantChangeType VariantInit SysStringLen SysAllocStringByteLen OleCreateFontIndirect SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysFreeString