emotet | 8d1c8651ba9e2a369eb5a5208901a1e97cfdc68faa9a77f0e5e07cf6fc982cd7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d1c8651ba9e2a369eb5a5208901a1e97cfdc68faa9a77f0e5e07cf6fc982cd7
Size

136KB
MD5

a936099be566ee49534a0cfe3c3886da
SHA1

035624ce0fc1b239f4a36a69b7041e1cc3684edd
SHA256

8d1c8651ba9e2a369eb5a5208901a1e97cfdc68faa9a77f0e5e07cf6fc982cd7
SHA512

fc96f502a9db948a46e5ba1f431229eb817f6c4a36fc258bf793939cc3f139a0debaf9fa97e0e54defa2da7d3ced8c5e2a9c9d565cee1e8c6b685438ca696a1b
SSDEEP

3072:xzRnuQpLlU6m277XSk7tkdJ2feIu1WQ2HK1AsTes5F9:x9n7pD3R+gWT1WnE

Score

10^/10

emotet

Malware Config

Signatures

Emotet family
emotet

Files

8d1c8651ba9e2a369eb5a5208901a1e97cfdc68faa9a77f0e5e07cf6fc982cd7
.dll windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ