emotet | 130ade9ac80656042b758d2f09a7626809c0e8d6982df901176fcb7f8825be90 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

130ade9ac80656042b758d2f09a7626809c0e8d6982df901176fcb7f8825be90
Size

136KB
MD5

b01597e241cbdf8c7b7cc53b60a40b38
SHA1

21af82ef48e62ac0344ee4a1376a0b95fd86ade4
SHA256

130ade9ac80656042b758d2f09a7626809c0e8d6982df901176fcb7f8825be90
SHA512

370075a34c7812074160a6df27b31fda3ad12f6c8e55754322ee5820f076c73037fc42f9792cec438f2ed20d1e483e84f9278e32dbac7499bca3c89f6d3109ab
SSDEEP

3072:xzRnuQpLlU6m277XSk7tkdJ2feIu1WQ2HK1AsTes5G9:x9n7pD3R+gWT1WnE

Score

10^/10

emotet

Malware Config

Signatures

Emotet family
emotet

Files

130ade9ac80656042b758d2f09a7626809c0e8d6982df901176fcb7f8825be90
.dll windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ