emotet | 180000000[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

180000000.dll
Size

176KB
MD5

7bdd8616b2eea93b4bcf4967782742da
SHA1

94f9aa6f50cb59f29f1f18af9cabc17511b13659
SHA256

0e6d36bca10b6e56accbd1ab4e6ab207b462511165ce00dc06ec804eff0b7b01
SHA512

1a0d57acdf028be6996011428dd0359dba3f29f28d0491848b95d12043bde97a47906445c29d4981e8461ef811af7945a04a928938b8b85d3bdcb32464257d01
SSDEEP

3072:yCS65TUo7WInfB2A5MNJgEqVw7UPej+1Ae7swyo8sTYBA:fJ5TUoznfUbgEqCI1lcsTYy

Score

10^/10

emotet

Malware Config

Signatures

Emotet family
emotet

Files

180000000.dll
.dll windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Exports

Exports

ZJKfDxsqUt

Sections

.text
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ