emotet | 94252e81dc856bb59792e7da1d41cba38a3048356dff2ab11d833742dbcdefcd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94252e81dc856bb59792e7da1d41cba38a3048356dff2ab11d833742dbcdefcd
Size

134KB
MD5

ec50d87fb7fe4bf8f387ee893e5e0574
SHA1

d48af1bffafdc50eead2dacdbf69262edecae6b0
SHA256

94252e81dc856bb59792e7da1d41cba38a3048356dff2ab11d833742dbcdefcd
SHA512

dca85ece09e582b664423c7269cc5f0f6ee6cf12c249d96e3451460ffcd725f001f9ccaa149c26a0810e9b6082fa4d4df1d9284201905485a51b5e161f8c49fc
SSDEEP

3072:3jnY4XPeTrc0HVZWzuqwDlT5KmE+5ms1ZfVFzJtrPN:LbPes2VczuqwDlTkSQs1VVFVJ

Score

10^/10

emotet

Malware Config

Signatures

Emotet family
emotet

Files

94252e81dc856bb59792e7da1d41cba38a3048356dff2ab11d833742dbcdefcd
.dll windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ