emotet_exe_e5_84da0f07bde34ecd23ebedbbf80e9d44dfaceed5823d6662b28c65b50d5747f3_2022-04-13__070159[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e5_84da0f07bde34ecd23ebedbbf80e9d44dfaceed5823d6662b28c65b50d5747f3_2022-04-13__070159.exe
Size 768KB
Sample220413-kz22psagbm
SHA256 84da0f07bde34ecd23ebedbbf80e9d44dfaceed5823d6662b28c65b50d5747f3
MD5 462d50a12e2668d6d02b400858014b55
SHA1 48d37ffb90d574ab3c056ffd80c28df1b803693d
SHA512 8fbc937e4238e60e61d5a8f10a9e8170b585695d06592e4175caaa6d4d8bd1e4b9b3e947fcd4a70dc4129402c0a4c7dbaacdcf3327b70c3e9c76954c3c0c6fd5
SSDEEP 12288:y7pLgbqIjZbwqHUM6AyNrYj2azO8BOg1s3F2r/:y7ssqeRYtzbO53F2
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e5_84da0f07bde34ecd23ebedbbf80e9d44dfaceed5823d6662b28c65b50d5747f3_2022-04-13__070159.exe

.dll 768KB

emotet_exe_e5_84da0f07bde34ecd23ebedbbf80e9d44dfaceed5823d6662b28c65b50d5747f3_2022-04-13__070159.exe

IMPHASH 8e62eefa00591f798befe699efe81b5b
SHA256 84da0f07bde34ecd23ebedbbf80e9d44dfaceed5823d6662b28c65b50d5747f3
MD5 462d50a12e2668d6d02b400858014b55
SHA1 48d37ffb90d574ab3c056ffd80c28df1b803693d
SHA512 8fbc937e4238e60e61d5a8f10a9e8170b585695d06592e4175caaa6d4d8bd1e4b9b3e947fcd4a70dc4129402c0a4c7dbaacdcf3327b70c3e9c76954c3c0c6fd5
SSDEEP 12288:y7pLgbqIjZbwqHUM6AyNrYj2azO8BOg1s3F2r/:y7ssqeRYtzbO53F2
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

76790

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TerminateProcess CreateThread ExitThread RaiseException HeapReAlloc HeapSize GetACP GetTimeZoneInformation GetSystemTime GetLocalTime LCMapStringA LCMapStringW FatalAppExitA Sleep HeapDestroy HeapCreate VirtualFree VirtualAlloc IsBadWritePtr SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetCommandLineA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter GetStringTypeA GetStringTypeW IsBadReadPtr IsBadCodePtr IsValidLocale IsValidCodePage GetLocaleInfoA EnumSystemLocalesA GetUserDefaultLCID GetVersionExA SetConsoleCtrlHandler SetStdHandle GetLocaleInfoW CompareStringA CompareStringW SetEnvironmentVariableA HeapAlloc GetProfileStringA InterlockedExchange HeapFree RtlUnwind CopyFileA GlobalSize FormatMessageA SetFileAttributesA SetFileTime SystemTimeToFileTime LocalFileTimeToFileTime GetFileTime GetFileSize GetFileAttributesA GetTickCount FileTimeToLocalFileTime FileTimeToSystemTime lstrlenW GetShortPathNameA GetStringTypeExA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose DeleteFileA MoveFileA SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile CreateFileA GetCurrentProcess DuplicateHandle SetErrorMode GetOEMCP GetCPInfo GetThreadLocale SizeofResource GetProcessVersion GetLastError GetCurrentDirectoryA WritePrivateProfileStringA GetPrivateProfileStringA GetPrivateProfileIntA GlobalFlags lstrcpynA TlsGetValue LocalReAlloc TlsSetValue EnterCriticalSection GlobalReAlloc LeaveCriticalSection TlsFree GlobalHandle DeleteCriticalSection TlsAlloc InitializeCriticalSection LocalFree LocalAlloc MultiByteToWideChar WideCharToMultiByte lstrlenA InterlockedIncrement InterlockedDecrement LoadLibraryA FreeLibrary GetVersion lstrcatA GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA lstrcpyA MulDiv GetModuleHandleA GetProcAddress SetLastError GlobalUnlock GlobalFree LockResource FindResourceA LoadResource CreateEventA SuspendThread SetThreadPriority ResumeThread SetEvent WaitForSingleObject CloseHandle GetModuleFileNameA GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA lstrcmpiA GetCurrentThread GetCurrentThreadId FreeEnvironmentStringsA ExitProcess

user32

MessageBeep SetRectEmpty LoadAcceleratorsA TranslateAcceleratorA LoadMenuA SetMenu ReuseDDElParam UnpackDDElParam InvalidateRect BringWindowToTop CharUpperA InflateRect RegisterClipboardFormatA RemoveMenu wvsprintfA PostThreadMessageA DestroyIcon ScrollWindow GetScrollInfo SetScrollInfo ShowScrollBar GetScrollRange SetScrollRange GetScrollPos SetScrollPos GetTopWindow IsChild GetCapture WinHelpA wsprintfA GetClassInfoA RegisterClassA GetMenu GetMenuItemCount GetSubMenu GetMenuItemID TrackPopupMenu SetWindowPlacement GetWindowTextLengthA GetWindowTextA GetDlgCtrlID DefWindowProcA CreateWindowExA GetClassLongA SetPropA UnhookWindowsHookEx GetPropA CallWindowProcA RemovePropA GetMessageTime GetMessagePos GetForegroundWindow SetForegroundWindow SetWindowLongA RegisterWindowMessageA OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetNextDlgGroupItem GrayStringA InsertMenuA TabbedTextOutA EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen ScreenToClient MapDialogRect SetWindowPos GetWindow SetWindowContextHelpId EndDialog SetActiveWindow IsWindow CreateDialogIndirectParamA GetMenuStringA GetDlgItem GetMenuCheckMarkDimensions LoadBitmapA GetMenuState ModifyMenuA SetMenuItemBitmaps CheckMenuItem EnableMenuItem GetFocus GetNextDlgTabItem GetMessageA TranslateMessage DispatchMessageA GetActiveWindow GetKeyState CallNextHookEx ValidateRect IsWindowVisible PeekMessageA GetCursorPos SetWindowsHookExA EnableWindow HideCaret ShowCaret ExcludeUpdateRgn DrawFocusRect DefDlgProcA IsWindowUnicode LoadIconA GetParent GetLastActivePopup IsWindowEnabled GetWindowLongA MessageBoxA SetCursor ShowOwnedPopups PostQuitMessage PostMessageA IsIconic GetSystemMetrics GetClientRect DrawIcon SetRect CopyAcceleratorTableA CharNextA GetDialogBaseUnits GetWindowRect GetSysColorBrush GetSystemMenu AppendMenuA SendMessageA PtInRect GetClassNameA WindowFromPoint GetWindowThreadProcessId GetDesktopWindow WaitMessage ReleaseCapture SetCapture LoadCursorA DestroyMenu LoadStringA OemToCharA CharToOemA ShowWindow MoveWindow SetWindowTextA IsDialogMessageA ScrollWindowEx IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton UpdateWindow SendDlgItemMessageA MapWindowPoints GetSysColor SetFocus EndDeferWindowPos EqualRect DeferWindowPos BeginDeferWindowPos DestroyWindow DeleteMenu DrawTextA CopyRect AdjustWindowRectEx

gdi32

SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetClipBox SelectClipRgn ExcludeClipRect IntersectClipRect OffsetClipRgn MoveToEx LineTo SetTextAlign SetTextJustification SetTextCharacterExtra SetMapperFlags GetCurrentPositionEx ArcTo SetArcDirection PolyDraw PolylineTo SetColorAdjustment PolyBezierTo DeleteObject GetClipRgn CreateRectRgn SelectClipPath ExtSelectClipRgn PlayMetaFileRecord GetObjectType SetMapMode PlayMetaFile GetDeviceCaps GetViewportExtEx GetWindowExtEx CreatePen ExtCreatePen CreateSolidBrush CreateHatchBrush CreatePatternBrush CreateDIBPatternBrushPt PtVisible RectVisible TextOutA ExtTextOutA Escape GetDCOrgEx GetObjectA BitBlt CreateCompatibleDC GetTextExtentPoint32A GetTextMetricsA CreateFontIndirectA GetTextColor GetBkColor DPtoLP LPtoDP GetMapMode PatBlt SetRectRgn CombineRgn CreateRectRgnIndirect CopyMetaFileA CreateDCA SetTextColor SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode SetBkColor SelectPalette GetStockObject SelectObject RestoreDC SaveDC StartDocA DeleteDC EnumMetaFile CreateDIBitmap GetTextExtentPointA CreateBitmap

comdlg32

GetSaveFileNameA GetFileTitleA GetOpenFileNameA

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegDeleteKeyA RegCreateKeyA RegEnumKeyA RegQueryValueA RegSetValueA RegOpenKeyA RegCloseKey RegDeleteValueA RegSetValueExA RegQueryValueExA RegOpenKeyExA RegCreateKeyExA

shell32

SHGetFileInfoA DragQueryFileA DragFinish DragAcceptFiles ExtractIconA

comctl32

ord17

oledlg

ord8

ole32

CoTreatAsClass StringFromCLSID ReadClassStg ReadFmtUserTypeStg OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CreateBindCtx OleDuplicateData CoFreeUnusedLibraries ReleaseStgMedium OleInitialize CoDisconnectObject OleRun CoCreateInstance CoTaskMemAlloc CoTaskMemFree CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID CoRegisterMessageFilter CoRegisterClassObject CoRevokeClassObject OleSetClipboard OleFlushClipboard OleIsCurrentClipboard CreateStreamOnHGlobal OleUninitialize

olepro32

ord253

oleaut32

SysAllocStringLen VariantClear VariantTimeToSystemTime VariantCopy VariantChangeType SysReAllocStringLen SysAllocString SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim SysAllocStringByteLen SysStringByteLen VarCyFromStr VarBstrFromCy VarDateFromStr VarBstrFromDate SafeArrayCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor SysStringLen LoadTypeLi SysFreeString

Name

.text

Size

416KB

Virtual Size

415KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

64KB

Virtual Size

61KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

20KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

16KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

216KB

Virtual Size

214KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

32KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ