emotet | 2a785ae57f183009a0aef9358812aa3c2421416bfb5e42264ae6f0bc0e132a00 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a785ae57f183009a0aef9358812aa3c2421416bfb5e42264ae6f0bc0e132a00
Size

136KB
MD5

4fddd88fe0439d2099224df689761477
SHA1

6a3200928c107da86cfaae9a556230cd7f3ad005
SHA256

2a785ae57f183009a0aef9358812aa3c2421416bfb5e42264ae6f0bc0e132a00
SHA512

35e010a36252a3a711b1e2e1201139174e1a4d883f1fd403039016b12f6a9e8a8ade8efea6800418292e452d177851914668725bda97ab03914078fc4933bd34
SSDEEP

3072:xARnqqL0LBU6mSL7XSkx6bTJmSeL91PQaUci3cV6949:x0n/0bHAngxh1PgM

Score

10^/10

emotet

Malware Config

Signatures

Emotet family
emotet

Files

2a785ae57f183009a0aef9358812aa3c2421416bfb5e42264ae6f0bc0e132a00
.dll windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ