emotet_exe_e4_0887e73d4d665231172c0ccad220f578e47b15e7516dfa008100d5851c0314cd_2022-04-26__083814[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e4_0887e73d4d665231172c0ccad220f578e47b15e7516dfa008100d5851c0314cd_2022-04-26__083814.exe
Size 640KB
Sample220426-kj93dabff9
SHA256 2577b1e6e13f2ee42f5c2e765cd92b658716e6b0ac3d50c8cb4cab8512ed7a4b
MD5 03bf6a7198e4ad42979adbd5134b0003
SHA1 704e291fb6f656267abb33bdbf6cf22bec43b4ba
SHA512 65a412d6b8b2d1964c20c06ea1abdb3dddac3a94878a836332274618ecb88651f0cb0ee7ec60881341352d739103211dc16e88e2be8805ee1fb8b229bba92c22
SSDEEP 12288:zNn1nskvW98UVBqJyBlk3LqZ86CN9hbF9cI:zNnBsKqPVB3gLqZ8ng
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_0887e73d4d665231172c0ccad220f578e47b15e7516dfa008100d5851c0314cd_2022-04-26__083814.exe

.dll 640KB

emotet_exe_e4_0887e73d4d665231172c0ccad220f578e47b15e7516dfa008100d5851c0314cd_2022-04-26__083814.exe

IMPHASH af39b18e1506ad42070ce5f318fcafa2
SHA256 2577b1e6e13f2ee42f5c2e765cd92b658716e6b0ac3d50c8cb4cab8512ed7a4b
MD5 03bf6a7198e4ad42979adbd5134b0003
SHA1 704e291fb6f656267abb33bdbf6cf22bec43b4ba
SHA512 65a412d6b8b2d1964c20c06ea1abdb3dddac3a94878a836332274618ecb88651f0cb0ee7ec60881341352d739103211dc16e88e2be8805ee1fb8b229bba92c22
SSDEEP 12288:zNn1nskvW98UVBqJyBlk3LqZ86CN9hbF9cI:zNnBsKqPVB3gLqZ8ng
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

203128

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

dbghelp

SymCleanup SymGetOptions SymUnloadModule64 SymGetLineFromAddr64 SymGetSymFromAddr64 SymLoadModuleExW SymSetOptions SymInitialize SymGetModuleInfo64

imagehlp

UnMapAndLoad MapAndLoad

kernel32

FlushFileBuffers LockFile UnlockFile SetEndOfFile GetFileSize DuplicateHandle GetCurrentProcess GetVolumeInformationW GetShortPathNameW CreateFileW LocalFileTimeToFileTime GetFileSizeEx HeapAlloc HeapFree GetSystemTimeAsFileTime GetCommandLineA RtlUnwind RaiseException HeapReAlloc Sleep HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent VirtualFree SetFilePointer HeapCreate HeapDestroy GetStdHandle GetModuleFileNameA GetCurrentDirectoryA GetDriveTypeA GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetTimeZoneInformation InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA WriteFile ReadFile lstrcmpiW GetStringTypeExW DeleteFileW MoveFileW GetCurrentDirectoryW GlobalFlags SystemTimeToFileTime GetThreadLocale TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement GetDiskFreeSpaceW GetFullPathNameW GetTempFileNameW GetFileTime SetFileTime GetFileAttributesW CloseHandle GetPrivateProfileStringW WritePrivateProfileStringW GetPrivateProfileIntW GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesW GetLocaleInfoW CompareStringA InterlockedExchange GlobalGetAtomNameW lstrlenA lstrcmpA FindFirstFileW FileTimeToLocalFileTime FileTimeToSystemTime FindNextFileW FindClose InterlockedDecrement FreeResource GetCurrentThreadId GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom GetVersionExW CompareStringW LoadLibraryA lstrcmpW GetVersionExA GetModuleHandleA GetCurrentProcessId GetModuleFileNameW GlobalFree GlobalAlloc GlobalLock GlobalUnlock lstrlenW MulDiv ExitProcess GetProcAddress LoadLibraryW GetLastError SetLastError GetModuleHandleW LocalFree FormatMessageW GetEnvironmentVariableW GetWindowsDirectoryW GetSystemDirectoryW SearchPathW MultiByteToWideChar FreeLibrary IsBadReadPtr LoadLibraryExW LockResource SizeofResource WideCharToMultiByte FindResourceW LoadResource VirtualAlloc

user32

DestroyMenu ReuseDDElParam UnpackDDElParam PostQuitMessage ValidateRect TranslateMessage GetMessageW ShowOwnedPopups SetWindowRgn SetTimer KillTimer IsZoomed WindowFromPoint GetSysColorBrush GetMenuItemInfoW DeleteMenu DestroyIcon CharUpperW DrawMenuBar DefMDIChildProcW DefFrameProcW InflateRect GetDesktopWindow GetActiveWindow CreateDialogIndirectParamW GetNextDlgTabItem EndDialog SetMenuItemBitmaps GetMenuCheckMarkDimensions ModifyMenuW EnableMenuItem CheckMenuItem SetWindowTextW IsDialogMessageW RegisterWindowMessageW SendDlgItemMessageW SendDlgItemMessageA WinHelpW IsChild GetCapture SetWindowsHookExW CallNextHookEx GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW GetFocus SetFocus GetWindowTextLengthW GetWindowTextW LoadAcceleratorsW SetActiveWindow DispatchMessageW GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageW ScrollWindow TrackPopupMenu GetKeyState SetMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar IsWindowVisible CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx EqualRect GetScrollInfo SetScrollInfo CopyRect PtInRect GetDlgCtrlID DefWindowProcW CallWindowProcW GetMenu SetWindowLongW SetWindowPos OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindow GetSysColor EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen ScreenToClient GrayStringW DrawTextExW DrawTextW TabbedTextOutW GetWindowThreadProcessId GetWindowLongW GetLastActivePopup IsWindowEnabled MessageBoxW LoadMenuW GetMenuState GetMenuStringW GetMenuItemID InsertMenuW GetMenuItemCount GetSubMenu SetCursor LoadCursorW InsertMenuItemW CreatePopupMenu SetRectEmpty GetCursorPos DestroyCursor SetCursorPos ReleaseCapture SetCapture RedrawWindow TranslateAcceleratorW TranslateMDISysAccel GetForegroundWindow BringWindowToTop CopyIcon InvalidateRect SystemParametersInfoW ShowWindow MessageBeep EndDeferWindowPos DeferWindowPos MapWindowPoints BeginDeferWindowPos IsWindow UpdateWindow LoadBitmapW GetWindowRect GetParent SetLastErrorEx FillRect SetRect DrawIcon LoadIconW GetClientRect GetSystemMetrics SendMessageW EnableWindow PostMessageW

gdi32

TextOutW ExtTextOutW Escape SelectObject SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx DeleteDC CreatePatternBrush CreateBitmap RectVisible CreateSolidBrush PatBlt DPtoLP CreateEllipticRgn LPtoDP Ellipse GetTextMetricsW GetTextExtentPoint32W GetCharWidthW CreateFontW StretchDIBits GetBkColor PtVisible GetPixel SetBkColor RestoreDC SaveDC GetDeviceCaps CreateFontIndirectW GetObjectW Rectangle StretchBlt CreateCompatibleDC CreateCompatibleBitmap GetStockObject DeleteObject IntersectClipRect ExcludeClipRect GetClipBox SetMapMode SetTextColor SetBkMode BitBlt

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW ClosePrinter OpenPrinterW

advapi32

GetFileSecurityW SetFileSecurityW RegQueryValueW RegOpenKeyW RegEnumKeyW RegDeleteKeyW RegDeleteValueW RegSetValueExW RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegSetValueW RegCloseKey RegCreateKeyW

shell32

DragFinish DragQueryFileW ExtractIconW SHGetFileInfoW ShellExecuteW

shlwapi

PathRemoveExtensionW PathFindFileNameW PathRemoveFileSpecW PathStripToRootW PathFindExtensionW PathIsUNCW

ole32

CoTaskMemFree CoUninitialize CoCreateInstance CoInitializeEx

oleaut32

VariantInit VariantChangeType VariantClear SysAllocStringLen