emotet | bcc6ac2e79d7f990964861abebee27a35dac79955790e14f404a83d8e38e5ade | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bcc6ac2e79d7f990964861abebee27a35dac79955790e14f404a83d8e38e5ade
Size

136KB
MD5

38b504e8b2568283f5e14c2aad4ad7df
SHA1

f00c64b1a15859d576306010863f6c51379619e9
SHA256

bcc6ac2e79d7f990964861abebee27a35dac79955790e14f404a83d8e38e5ade
SHA512

76b3bbedf6591dd7d4a1d7187b75535f4e5e5afed50543aabe8252a0bcb92b88be0b1c764dff0a935561141c357ce12cb833e9226c08105aadbbac4098dc4dfa
SSDEEP

3072:xARnqqL0LBU6mSL7XSkx6bTJmSeL91PQaUci3cV69S9:x0n/0bHAngxh1PgM

Score

10^/10

emotet

Malware Config

Signatures

Emotet family
emotet

Files

bcc6ac2e79d7f990964861abebee27a35dac79955790e14f404a83d8e38e5ade
.dll windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ