emotet | 1acb67b597a0a990fa07614bcc48d713baaf5e0555b314353cbde36666b6bb7b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1acb67b597a0a990fa07614bcc48d713baaf5e0555b314353cbde36666b6bb7b
Size

136KB
MD5

fab4ef3e0fdf62c5b46327378346e607
SHA1

a7d32c55ca9d6753c0b30b4501093c0508eeadc4
SHA256

1acb67b597a0a990fa07614bcc48d713baaf5e0555b314353cbde36666b6bb7b
SHA512

3233fd6c077a0889835db5f1deee4a04694284896698a48ed7cabd0b003c8a2033c4fe04a6ad938f31e35b2971506af3160ed277ee87a5e179e119c6ccaec02b
SSDEEP

3072:xcRne2+jLPU6mseI7XSkZzF/JDterc1vQ95yHBaUBMs9:xgnEj3eqdJ1sY1v3A

Score

10^/10

emotet

Malware Config

Signatures

Emotet family
emotet

Files

1acb67b597a0a990fa07614bcc48d713baaf5e0555b314353cbde36666b6bb7b
.dll windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ