emotet | 804652c3ab7b95d79eb3386c0e8a19b36b62cd84356b0502f170c821bad2b2e0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

804652c3ab7b95d79eb3386c0e8a19b36b62cd84356b0502f170c821bad2b2e0
Size

136KB
MD5

3086db4a52b63225c735b7ab7b4f5f1f
SHA1

eaafc7c451cea4caf65d3acac066e42c4675e3c3
SHA256

804652c3ab7b95d79eb3386c0e8a19b36b62cd84356b0502f170c821bad2b2e0
SHA512

f2b9f2dcb29d3e16baab5463d7041fae69081d04f4ef0fe151cd20940b0c98eb08b8099623450d15217b8b72f4eb4f442b6bab00162bb8b32a989f6bfd6eeab1
SSDEEP

3072:xcRne2+jLPU6mseI7XSkZzF/JDterc1vQ95yHBaUBMD9:xgnEj3eqdJ1sY1v3A

Score

10^/10

emotet

Malware Config

Signatures

Emotet family
emotet

Files

804652c3ab7b95d79eb3386c0e8a19b36b62cd84356b0502f170c821bad2b2e0
.dll windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ