Behavioral task
behavioral1
Sample
90bf57ed41c2bffe943f76201920d3565ec713c783abfd484f977442bd32a7f8.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
90bf57ed41c2bffe943f76201920d3565ec713c783abfd484f977442bd32a7f8.dll
Resource
win10-20220812-en
General
-
Target
90bf57ed41c2bffe943f76201920d3565ec713c783abfd484f977442bd32a7f8
-
Size
126KB
-
MD5
519b52e8479baf3c84f2104b2c5472ea
-
SHA1
107b97f3999d7a9e37a960702f463d186ef86f19
-
SHA256
90bf57ed41c2bffe943f76201920d3565ec713c783abfd484f977442bd32a7f8
-
SHA512
b43403113f58df2d68b9632c8f6249d57d6c61f25a0f1d535a7f5e96e5d99cc93bb0b07fb2b704881cc57e6f7bc8fdbeb22c8e1b53cf9bd085d072f259e8f73b
-
SSDEEP
3072:RWyVZ9biNga20jGNhZncyeLUqaoU+9BAbC9lhyA5/NPdD:gSZxa5jGTZc/Qqal+9BAgllL
Malware Config
Extracted
emotet
198.27.67.35:8080
190.107.19.180:8080
58.96.74.42:443
116.125.120.88:443
180.250.21.2:443
165.227.153.100:8080
62.141.45.103:443
134.209.164.181:8080
212.98.224.97:8080
159.65.163.220:443
128.199.93.156:7080
198.211.118.165:443
203.217.140.239:8080
Signatures
-
Emotet family
Files
-
90bf57ed41c2bffe943f76201920d3565ec713c783abfd484f977442bd32a7f8.dll windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 520B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ