emotet | 4806e9581602cdf2e96f3e39635eff6adbeed0e7849d6ca2e8cdb63a85dabdc2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4806e9581602cdf2e96f3e39635eff6adbeed0e7849d6ca2e8cdb63a85dabdc2
Size

136KB
MD5

7ae1b65f896370dca678a174dbf9bd40
SHA1

b64676061ccea71da9a77a3d24c3c8af8527588f
SHA256

4806e9581602cdf2e96f3e39635eff6adbeed0e7849d6ca2e8cdb63a85dabdc2
SHA512

bd30e4bcd8fca2408b4c68331a9929d708a466169c50a35b33abe5cc78dacf06ce37fc3a5c59f2687a619bcd789694b10d065bdd12f105ba6e3972e322af75e2
SSDEEP

3072:xARnqqL0LBU6mSL7XSkx6bTJmSeL91PQaUci3cV69O9:x0n/0bHAngxh1PgM

Score

10^/10

emotet

Malware Config

Signatures

Emotet family
emotet

Files

4806e9581602cdf2e96f3e39635eff6adbeed0e7849d6ca2e8cdb63a85dabdc2
.dll windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ