emotet | f1710a0e64666d4ad30019bb3f313c1bc7975abc7fcbc9dcfeadd527352f96f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1710a0e64666d4ad30019bb3f313c1bc7975abc7fcbc9dcfeadd527352f96f3
Size

136KB
MD5

10fc09e001753df167ae5b67f1dfa81c
SHA1

7576a9982d840e46d288e67aa1caa6a3bcd58240
SHA256

f1710a0e64666d4ad30019bb3f313c1bc7975abc7fcbc9dcfeadd527352f96f3
SHA512

139031fa969b36fa9a9bfa5bd26a815e39152a700974c2a6efeb7e2763c22405d74387dc61ab97d8b9d52fc60fe0381a4840f34f578e04bfd5b365502562924e
SSDEEP

3072:xARnqqL0LBU6mSL7XSkx6bTJmSeL91PQaUci3cV69J9:x0n/0bHAngxh1PgM

Score

10^/10

emotet

Malware Config

Signatures

Emotet family
emotet

Files

f1710a0e64666d4ad30019bb3f313c1bc7975abc7fcbc9dcfeadd527352f96f3
.dll windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ