emotet | dca01934b780045b09347705dda0687a09eed0e832433f2d957bbcc617256616 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dca01934b780045b09347705dda0687a09eed0e832433f2d957bbcc617256616
Size

134KB
MD5

a48c32fa5ff9be90225dc60360f6bc1b
SHA1

2e5e23fe20be7966db787936cb7f2f561fa77c5e
SHA256

dca01934b780045b09347705dda0687a09eed0e832433f2d957bbcc617256616
SHA512

4f08a50aa24efab42f26d538e3e998607812d3459acbde85e932943150cf3f692ea2ad4b59af95d68be5eba6452c5ec3384c99380cfcafefae3adfdf9f3e4a6e
SSDEEP

3072:OjfYCRPegrn0/Vha0XqwflTJKmE+3UcUY/RzNhrPN:YHPewaVQ0XqwflTUSkcU0R5t

Score

10^/10

emotet

Malware Config

Signatures

Emotet family
emotet

Files

dca01934b780045b09347705dda0687a09eed0e832433f2d957bbcc617256616
.dll windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ