emotet | f7888c5020fafb864011242706b5cee7e80aff0c647d6db3d6c2f9f37a8ba326 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f7888c5020fafb864011242706b5cee7e80aff0c647d6db3d6c2f9f37a8ba326
Size

136KB
MD5

6a9721932114818338d24a4bf0ea13e8
SHA1

696a0fb313a51276108a3b4a5d45a5651e6f92c6
SHA256

f7888c5020fafb864011242706b5cee7e80aff0c647d6db3d6c2f9f37a8ba326
SHA512

896763107a72c3203981f7ea00f815f6b24a38c04c24314215b5a0cb65321136f71a0e79a78818c99f9f8f1cd822f6d1458c4af8887b19619604ce17f5141db4
SSDEEP

3072:xARnqqL0LBU6mSL7XSkx6bTJmSeL91PQaUci3cV69n9:x0n/0bHAngxh1PgM

Score

10^/10

emotet

Malware Config

Signatures

Emotet family
emotet

Files

f7888c5020fafb864011242706b5cee7e80aff0c647d6db3d6c2f9f37a8ba326
.dll windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ