emotet | bafdb82120a6e8da243e78806f21c5f5021377bf9b8dc839c32ff07efdf65577 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bafdb82120a6e8da243e78806f21c5f5021377bf9b8dc839c32ff07efdf65577
Size

135KB
MD5

dc7dd4f455478e0d9783729ba63793f1
SHA1

f6efb36a6ecc5d6193343ea01fd64da03652ad2d
SHA256

bafdb82120a6e8da243e78806f21c5f5021377bf9b8dc839c32ff07efdf65577
SHA512

17b2413a88a8a0c65296d8326075967ebbc94741b220eea393732078bc4b3cbd1bbe4ef51aab99ebf8764474ecfd6f161aa7ccef85d08f1e0c6faece42e78ee9
SSDEEP

3072:xARnqqL0LBU6mSL7XSkx6bTJmSeL91PQaUci3cV6979W:x0n/0bHAngxh1PgMX

Score

10^/10

emotet

Malware Config

Signatures

Emotet family
emotet

Files

bafdb82120a6e8da243e78806f21c5f5021377bf9b8dc839c32ff07efdf65577
.dll windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ