emotet | 768edba958f32ae99fadedcf46974b422cf4f9be12b702ad94bb9a04bb65d800 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

768edba958f32ae99fadedcf46974b422cf4f9be12b702ad94bb9a04bb65d800
Size

136KB
MD5

864d5e2f1cc89108543e1163df6f4a11
SHA1

d4a95a4a735fa91a08113918238b60dcf08b7c3f
SHA256

768edba958f32ae99fadedcf46974b422cf4f9be12b702ad94bb9a04bb65d800
SHA512

c9918df4886efd9a72e7a3a1da178a8005fe48cec4bb83fa34ee9c7c58d527a587f322d8c557e3671a8ec710bbae55b24df8a75cb7ce4dea21df6ae22791d719
SSDEEP

3072:xARnqqL0LBU6mSL7XSkx6bTJmSeL91PQaUci3cV69p9:x0n/0bHAngxh1PgM

Score

10^/10

emotet

Malware Config

Signatures

Emotet family
emotet

Files

768edba958f32ae99fadedcf46974b422cf4f9be12b702ad94bb9a04bb65d800
.dll windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ