emotet | d1675a61fef43eb5a3abfe84baba5d5923e2a10e3f101662af2c757cdd545fb7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1675a61fef43eb5a3abfe84baba5d5923e2a10e3f101662af2c757cdd545fb7
Size

136KB
MD5

3a5e689432ce16046718f09dcb232e98
SHA1

02919771dd756a57b146893e140ad93d23eee861
SHA256

d1675a61fef43eb5a3abfe84baba5d5923e2a10e3f101662af2c757cdd545fb7
SHA512

aea3ebc61f988bec7ccf386bd767b639d781294ac1b7aa847f2f595c1984c12c7a1f46635a404492f6c0386ad319a6ee3e3d7d8f99b0915ea778572a40fa1728
SSDEEP

3072:xARnqqL0LBU6mSL7XSkx6bTJmSeL91PQaUci3cV69e9:x0n/0bHAngxh1PgM

Score

10^/10

emotet

Malware Config

Signatures

Emotet family
emotet

Files

d1675a61fef43eb5a3abfe84baba5d5923e2a10e3f101662af2c757cdd545fb7
.dll windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ