emotet | 7c6c54bf63920c3623aa66f515033f67935ebe2b72f78bc0885169e62494113f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7c6c54bf63920c3623aa66f515033f67935ebe2b72f78bc0885169e62494113f
Size

136KB
MD5

1499d34c43afc020558824127dc0f926
SHA1

367068f42a30b55ed7291605661110fb39953db8
SHA256

7c6c54bf63920c3623aa66f515033f67935ebe2b72f78bc0885169e62494113f
SHA512

e2e094ff8f3ccb9098567b96269537284eabfae8fdec13963802157daab3e44bc1401d0f2c0baf33e3a55c6f439affd7fbdd7031c218b06c092efa5b18c229c5
SSDEEP

3072:xzRnuQpLlU6m277XSk7tkdJ2feIu1WQ2HK1AsTes5P9:x9n7pD3R+gWT1WnE

Score

10^/10

emotet

Malware Config

Signatures

Emotet family
emotet

Files

7c6c54bf63920c3623aa66f515033f67935ebe2b72f78bc0885169e62494113f
.dll windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ