emotet | 3dcca82bf76071f841df3c55cf85c7d674e8e7add3e304d349a6a90110090ab6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dcca82bf76071f841df3c55cf85c7d674e8e7add3e304d349a6a90110090ab6
Size

136KB
MD5

5a8d753063502929f738886f15fed7b0
SHA1

2b028801ea3cfc550d42cdb08e6108da1768168a
SHA256

3dcca82bf76071f841df3c55cf85c7d674e8e7add3e304d349a6a90110090ab6
SHA512

503b3ceec131e9d299dc3dcb63ac166724701b33044ec7f23dff05fdf314ce1cc358087133347e297e364e0a9e3199015a7249411ce325e36f0add2385060673
SSDEEP

3072:xARnqqL0LBU6mSL7XSkx6bTJmSeL91PQaUci3cV69O9:x0n/0bHAngxh1PgM

Score

10^/10

emotet

Malware Config

Signatures

Emotet family
emotet

Files

3dcca82bf76071f841df3c55cf85c7d674e8e7add3e304d349a6a90110090ab6
.dll windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ