HEUR-Trojan-Banker[.]Win32[.]Emotet[.]pef-d370f2b103598ca26688560b98edb8df2079b769d2bb17ff112eb10a9bfa26fe[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
HEUR-Trojan-Banker.Win32.Emotet.pef-d370f2b103598ca26688560b98edb8df2079b769d2bb17ff112eb10a9bfa26fe.exe
Size 640KB
Sample220831-elt62sabe4
SHA256 d370f2b103598ca26688560b98edb8df2079b769d2bb17ff112eb10a9bfa26fe
MD5 77f4f9d3573beaa5d91aa7ebca45d2e1
SHA1 0058a4d2667c2ef7ee806ae5c39f4faa318593af
SHA512 5069afeb5cd11d6b05904005c06dc663f770df258b32d36a0e17c6ed060f62e792fe68bc717047e7d482df36c45b9778113e46f0840ba4ff4ba33fcd19400b90
SSDEEP 6144:aZ8LXFyqywQQCaKFh2gf8DVC0Vm8rFqUBscFH85fqtN/5jfm/CXK6TiRWBYUT/O:aZ8uQCaGhSDTk8rF/BFJNRkn4iRki
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

HEUR-Trojan-Banker.Win32.Emotet.pef-d370f2b103598ca26688560b98edb8df2079b769d2bb17ff112eb10a9bfa26fe.exe

.exe 640KB

HEUR-Trojan-Banker.Win32.Emotet.pef-d370f2b103598ca26688560b98edb8df2079b769d2bb17ff112eb10a9bfa26fe.exe

IMPHASH 56f1d7c262b0c820351948ee74733a49
SHA256 d370f2b103598ca26688560b98edb8df2079b769d2bb17ff112eb10a9bfa26fe
MD5 77f4f9d3573beaa5d91aa7ebca45d2e1
SHA1 0058a4d2667c2ef7ee806ae5c39f4faa318593af
SHA512 5069afeb5cd11d6b05904005c06dc663f770df258b32d36a0e17c6ed060f62e792fe68bc717047e7d482df36c45b9778113e46f0840ba4ff4ba33fcd19400b90
SSDEEP 6144:aZ8LXFyqywQQCaKFh2gf8DVC0Vm8rFqUBscFH85fqtN/5jfm/CXK6TiRWBYUT/O:aZ8uQCaGhSDTk8rF/BFJNRkn4iRki
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

200026

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

mpr

WNetCancelConnection2A WNetAddConnection2A

kernel32

WaitNamedPipeA CreateFileA FreeConsole InterlockedIncrement MulDiv GlobalUnlock GlobalLock GlobalAlloc GlobalFree FreeResource GetVersionExA lstrcmpW FreeLibrary GlobalDeleteAtom GlobalFindAtomA GlobalAddAtomA GlobalGetAtomNameA GetCurrentThreadId GetModuleFileNameW InterlockedDecrement GetModuleFileNameA SetThreadPriority WaitForSingleObject SetEvent InitializeCriticalSection CreateEventA lstrcmpA GetLocaleInfoA EnumResourceLanguagesA ConvertDefaultLocale GetCurrentThread GetPrivateProfileIntA WritePrivateProfileStringA GetPrivateProfileStringA GetFileAttributesA SetFileTime GetFileTime GetTempFileNameA GetFullPathNameA GetDiskFreeSpaceA LocalAlloc TlsGetValue GlobalReAlloc GlobalHandle TlsAlloc TlsSetValue LocalReAlloc DeleteCriticalSection TlsFree GlobalFlags GetCPInfo GetOEMCP GetThreadLocale FileTimeToSystemTime SystemTimeToFileTime GetCurrentDirectoryA MoveFileA DeleteFileA SetFilePointer FlushFileBuffers LockFile UnlockFile SetEndOfFile GetFileSize DuplicateHandle GetCurrentProcess FindClose FindFirstFileA GetVolumeInformationA GetShortPathNameA FileTimeToLocalFileTime LocalFileTimeToFileTime SetErrorMode HeapAlloc HeapFree RtlUnwind HeapReAlloc VirtualAlloc ExitThread CreateThread RaiseException GetCommandLineA GetProcessHeap GetStartupInfoA ExitProcess HeapSize VirtualFree HeapDestroy HeapCreate GetStdHandle TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetACP FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA Sleep ReadFile SetLastError GetProcAddress GetModuleHandleA LoadLibraryA WriteFile FormatMessageA LocalFree EnterCriticalSection LeaveCriticalSection FindResourceA LoadResource LockResource SizeofResource ResumeThread GetStringTypeExA lstrlenA lstrcmpiA CompareStringW CompareStringA GetCurrentProcessId CreateToolhelp32Snapshot Module32First Module32Next CloseHandle GetVersion GetLastError WideCharToMultiByte MultiByteToWideChar InterlockedExchange SuspendThread

user32

SetDlgItemTextA IsDialogMessageA SetWindowTextA GetWindowThreadProcessId ValidateRect TranslateMessage GetMessageA InflateRect GetMenuItemInfoA DestroyMenu InvalidateRect TranslateAcceleratorA SetMenu BringWindowToTop SetRectEmpty CreatePopupMenu InsertMenuItemA LoadAcceleratorsA ReleaseCapture SetCursor ReuseDDElParam UnpackDDElParam SetRect KillTimer WindowFromPoint IsZoomed RedrawWindow SetCapture SetCursorPos DestroyCursor IsRectEmpty UnionRect PostQuitMessage ShowOwnedPopups FillRect TabbedTextOutA DrawTextA DrawTextExA GrayStringA GetWindowDC BeginPaint EndPaint GetSysColorBrush UnregisterClassA SetParent GetDCEx LockWindowUpdate FindWindowA DestroyIcon SetWindowsHookExA CallNextHookEx GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA GetFocus SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints TrackPopupMenu GetKeyState SetScrollPos GetScrollPos IsWindowVisible GetMenu PostMessageA MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect GetWindow GetActiveWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow GetWindowLongA GetDlgItem IsWindowEnabled GetParent GetNextDlgTabItem EndDialog ReleaseDC GetDC CopyRect IsWindow GetMenuState GetMenuStringA GetMenuItemID InsertMenuA GetMenuItemCount EnableWindow CharUpperA SendMessageA LoadStringA PtInRect GetSubMenu LoadMenuA ClientToScreen LoadIconA GetClientRect DeleteMenu GetSystemMenu SetTimer UpdateWindow GetDesktopWindow ShowWindow LoadBitmapA LoadCursorA SetForegroundWindow GetCursorPos SetMenuItemBitmaps GetMenuCheckMarkDimensions ModifyMenuA EnableMenuItem CheckMenuItem RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture

gdi32

CreatePatternBrush GetStockObject CreateSolidBrush SetRectRgn CreateRectRgn SelectClipRgn CombineRgn CreateRectRgnIndirect PatBlt GetClipBox SetTextColor SetBkColor CreateBitmap CreateFontIndirectA CreateCompatibleBitmap DeleteObject GetCharWidthA SelectObject CreateFontA DeleteDC StretchDIBits GetBkColor GetTextMetricsA SaveDC RestoreDC SetBkMode GetObjectA CreateCompatibleDC BitBlt ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx ExtTextOutA SetMapMode ExcludeClipRect IntersectClipRect Escape TextOutA RectVisible PtVisible GetPixel GetTextExtentPoint32A GetDeviceCaps

advapi32

RegCloseKey RegOpenKeyA RegQueryValueExA RegOpenKeyExA RegDeleteKeyA RegEnumKeyA RegQueryValueA RegCreateKeyExA RegSetValueExA RegDeleteValueA SetFileSecurityA GetFileSecurityA RegCreateKeyA OpenSCManagerA OpenServiceA CreateServiceA CloseServiceHandle StartServiceA InitializeSecurityDescriptor SetSecurityDescriptorDacl CryptAcquireContextA RegSetValueA

shell32

SHGetFileInfoA DragFinish DragQueryFileA ExtractIconA Shell_NotifyIconA

comctl32

ImageList_Destroy

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

ws2_32

WSACleanup WSAStartup

oleacc

CreateStdAccessibleObject LresultFromObject

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

comdlg32

GetFileTitleA

oleaut32

VariantInit SysAllocStringLen VariantChangeType VariantClear