HEUR-Trojan-Banker[.]Win32[.]Emotet[.]pef-9497947317de775bf39e760510b97dafe981e4b541b324b7e474e5dfa26aed7d[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
HEUR-Trojan-Banker.Win32.Emotet.pef-9497947317de775bf39e760510b97dafe981e4b541b324b7e474e5dfa26aed7d.exe
Size 688KB
Sample220831-ddbt3ahdf7
SHA256 9497947317de775bf39e760510b97dafe981e4b541b324b7e474e5dfa26aed7d
MD5 4c24db2075cefe907920db6ff0e74665
SHA1 0ea1a57b0694acb32f76808d2dadc1161aec570b
SHA512 211f46f0e8a398d3de06275cbf4285428ec333889b69eb4fd5e0b1ef737d9bab8c431bbe3697a446008c9dbff00b73a7db66dddd9ffa322783e3fd3159616b52
SSDEEP 12288:WczkzokNpdUt31o1ROyB0cWGethNfc4dET9VJp1/F:SutgROyOGetjCb1/F
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

HEUR-Trojan-Banker.Win32.Emotet.pef-9497947317de775bf39e760510b97dafe981e4b541b324b7e474e5dfa26aed7d.exe

.exe 688KB

HEUR-Trojan-Banker.Win32.Emotet.pef-9497947317de775bf39e760510b97dafe981e4b541b324b7e474e5dfa26aed7d.exe

IMPHASH 7f1fff86ab48aa59a36bc19532d8e1f5
SHA256 9497947317de775bf39e760510b97dafe981e4b541b324b7e474e5dfa26aed7d
MD5 4c24db2075cefe907920db6ff0e74665
SHA1 0ea1a57b0694acb32f76808d2dadc1161aec570b
SHA512 211f46f0e8a398d3de06275cbf4285428ec333889b69eb4fd5e0b1ef737d9bab8c431bbe3697a446008c9dbff00b73a7db66dddd9ffa322783e3fd3159616b52
SSDEEP 12288:WczkzokNpdUt31o1ROyB0cWGethNfc4dET9VJp1/F:SutgROyOGetjCb1/F
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

110447

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

shlwapi

PathFindExtensionA PathFileExistsA

kernel32

ExitProcess TerminateProcess CreateThread ExitThread RaiseException HeapReAlloc HeapSize GetACP SetHandleCount GetStdHandle GetFileType FatalAppExitA LCMapStringA LCMapStringW SetCurrentDirectoryA HeapDestroy HeapCreate VirtualFree VirtualAlloc IsBadWritePtr Sleep UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetUnhandledExceptionFilter GetStringTypeA GetStringTypeW IsBadReadPtr IsBadCodePtr SetStdHandle IsValidLocale IsValidCodePage GetLocaleInfoA EnumSystemLocalesA GetUserDefaultLCID GetVersionExA SetConsoleCtrlHandler GetLocaleInfoW CompareStringA CompareStringW SetEnvironmentVariableA GetCommandLineA GetStartupInfoA InterlockedExchange CreateDirectoryA lstrlenA GlobalUnlock GlobalLock GlobalAlloc GlobalSize FreeLibrary GetLastError CreateEventA GetProcAddress LoadLibraryA LoadLibraryExW LoadLibraryExA CloseHandle WaitForSingleObject ResetEvent GetCurrentThreadId GetCurrentThread lstrcmpiA lstrcmpA GlobalDeleteAtom GetModuleFileNameA SetEvent ResumeThread SetThreadPriority SuspendThread LoadResource FindResourceA LockResource GlobalFree GetModuleHandleA lstrcpyA GlobalFindAtomA GlobalAddAtomA GlobalGetAtomNameA lstrcatA GetVersion InterlockedIncrement GetLocalTime GetSystemTime GetTimeZoneInformation HeapAlloc HeapFree GetDriveTypeA RtlUnwind SetErrorMode SetFileAttributesA SetFileTime InterlockedDecrement WideCharToMultiByte MultiByteToWideChar SetLastError MulDiv LocalFree SystemTimeToFileTime LocalFileTimeToFileTime GetFileTime GetFileSize GetFileAttributesA CopyFileA lstrlenW FileTimeToLocalFileTime FileTimeToSystemTime GetOEMCP GetCPInfo SizeofResource GetProcessVersion GetCurrentDirectoryA WritePrivateProfileStringA GetPrivateProfileStringA GetPrivateProfileIntA GlobalFlags TlsGetValue LocalReAlloc TlsSetValue EnterCriticalSection GlobalReAlloc LeaveCriticalSection TlsFree GlobalHandle DeleteCriticalSection TlsAlloc InitializeCriticalSection LocalAlloc GetShortPathNameA GetThreadLocale GetStringTypeExA GetFullPathNameA GetVolumeInformationA DeleteFileA MoveFileA SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile CreateFileA GetCurrentProcess DuplicateHandle GetTickCount FindNextFileA FindFirstFileA FindClose lstrcpynA FormatMessageA GetProfileStringA

user32

CopyAcceleratorTableA SetRect GetNextDlgGroupItem MessageBeep InflateRect PostThreadMessageA AppendMenuA RemoveMenu SetRectEmpty LoadAcceleratorsA TranslateAcceleratorA ReuseDDElParam UnpackDDElParam BringWindowToTop DestroyIcon CharNextA GetDialogBaseUnits LoadStringA GetSysColorBrush GetMenuStringA DeleteMenu InsertMenuA GetClassNameA WindowFromPoint GetWindowThreadProcessId GetDesktopWindow WaitMessage LoadCursorA CharUpperA IsClipboardFormatAvailable GrayStringA TabbedTextOutA EndPaint BeginPaint GetWindowDC ClientToScreen DestroyMenu wvsprintfA OemToCharA CharToOemA GetDC ReleaseDC ShowWindow MoveWindow SetWindowTextA IsDialogMessageA ScrollWindowEx IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton UpdateWindow SendDlgItemMessageA MapWindowPoints SetFocus AdjustWindowRectEx EqualRect DeferWindowPos BeginDeferWindowPos CopyRect EndDeferWindowPos ScrollWindow GetScrollInfo ShowScrollBar GetScrollRange SetScrollRange GetScrollPos GetTopWindow IsChild GetCapture WinHelpA wsprintfA GetClassInfoA RegisterClassA GetMenu GetMenuItemCount GetMenuItemID TrackPopupMenu SetWindowPlacement GetWindowTextLengthA GetWindowTextA GetDlgCtrlID DefWindowProcA GetClassLongA SetPropA UnhookWindowsHookEx GetPropA CallWindowProcA RemovePropA GetMessageTime GetMessagePos GetForegroundWindow SetForegroundWindow SetWindowLongA RegisterWindowMessageA OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement LoadIconA UnregisterClassA HideCaret ExcludeUpdateRgn DrawFocusRect DefDlgProcA IsWindowUnicode GetSystemMetrics GetWindowRect MapDialogRect SetWindowPos GetWindow SetWindowContextHelpId EndDialog SetActiveWindow IsWindow CreateDialogIndirectParamA DestroyWindow GetDlgItem GetMenuCheckMarkDimensions LoadBitmapA GetMenuState ModifyMenuA SetMenuItemBitmaps CheckMenuItem GetFocus GetNextDlgTabItem GetMessageA TranslateMessage DispatchMessageA GetActiveWindow CallNextHookEx ValidateRect IsWindowVisible PeekMessageA GetCursorPos SetWindowsHookExA GetClientRect SendMessageA SetMenu DrawIcon IsIconic LoadMenuA EnableWindow GetSysColor DrawTextA FillRect ShowCaret SetCaretPos DestroyCaret SetScrollPos RedrawWindow SetCapture DragDetect CreateCaret PtInRect EnableScrollBar SetScrollInfo ReleaseCapture GetKeyState RegisterClipboardFormatA EnableMenuItem GetSubMenu EmptyClipboard InvalidateRect CreateWindowExA InSendMessage MessageBoxA PostMessageA PostQuitMessage ShowOwnedPopups SetCursor GetWindowLongA GetParent GetLastActivePopup IsWindowEnabled ScreenToClient

gdi32

SelectPalette SetBkMode SetPolyFillMode SetROP2 SetStretchBltMode SetMapMode SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx SelectClipRgn ExcludeClipRect IntersectClipRect OffsetClipRgn MoveToEx LineTo SetTextAlign SetTextJustification SetTextCharacterExtra SetMapperFlags GetCurrentPositionEx ArcTo SetArcDirection PolyDraw PolylineTo SetColorAdjustment PolyBezierTo GetStockObject GetClipRgn CreateRectRgn SelectClipPath ExtSelectClipRgn PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile GetDeviceCaps GetViewportExtEx GetWindowExtEx CreatePen ExtCreatePen CreateHatchBrush CreatePatternBrush CreateDIBPatternBrushPt PtVisible RectVisible ExtTextOutA Escape GetTextMetricsA CreateFontIndirectA GetTextColor GetBkColor DPtoLP LPtoDP GetMapMode SetRectRgn CombineRgn CopyMetaFileA CreateDCA RestoreDC SaveDC StartDocA DeleteDC CreateRectRgnIndirect PatBlt GetObjectA SetBkColor SetTextColor GetClipBox GetDCOrgEx CreateBitmap CreateCompatibleDC CreateCompatibleBitmap SelectObject CreateSolidBrush SetBoundsRect GetCharWidthA GetTextExtentPoint32A TextOutA BitBlt DeleteObject CreateDIBitmap CreateFontA GetTextExtentPointA

comdlg32

GetOpenFileNameA GetSaveFileNameA GetFileTitleA

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegEnumKeyA RegCloseKey RegOpenKeyA RegCreateKeyExA RegOpenKeyExA RegSetValueExA RegDeleteValueA RegDeleteKeyA RegSetValueA RegCreateKeyA RegQueryValueExA RegQueryValueA

shell32

ExtractIconA SHGetFileInfoA DragFinish DragAcceptFiles DragQueryFileA

comctl32

ord17 ord13 ord14 ImageList_Destroy ImageList_Create ImageList_LoadImageA ImageList_Merge ImageList_Read ImageList_Write

oledlg

ord8

ole32

SetConvertStg CreateBindCtx OleDuplicateData CreateStreamOnHGlobal CoDisconnectObject CoRevokeClassObject CoRegisterClassObject CoRegisterMessageFilter CoTaskMemAlloc CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes WriteFmtUserTypeStg OleIsCurrentClipboard OleFlushClipboard OleSetClipboard OleGetClipboard ReleaseStgMedium CoTaskMemFree CoFreeUnusedLibraries CLSIDFromString CLSIDFromProgID CoCreateInstance OleUninitialize OleInitialize WriteClassStg OleRegGetUserType ReadFmtUserTypeStg ReadClassStg StringFromCLSID CoTreatAsClass OleRun CoGetClassObject

olepro32

ord253

oleaut32

LoadTypeLi SysStringLen SafeArrayDestroyDescriptor SafeArrayDestroyData SafeArrayDestroy SafeArrayUnlock SafeArrayLock SysFreeString SysAllocStringLen VariantClear VariantTimeToSystemTime SysStringByteLen VariantCopy VariantChangeType SysReAllocStringLen SysAllocString SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim SysAllocStringByteLen VarCyFromStr VarBstrFromCy VarDateFromStr VarBstrFromDate SafeArrayCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement

Name

.text

Size

468KB

Virtual Size

466KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

76KB

Virtual Size

74KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

28KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

64KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

32KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ