Behavioral task
behavioral1
Sample
a25104fa5dcfbfcab30fc4ea9f124ba32a9b3df0e0ec64e31c939da13af8f614.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a25104fa5dcfbfcab30fc4ea9f124ba32a9b3df0e0ec64e31c939da13af8f614.dll
Resource
win10-20220812-en
General
-
Target
a25104fa5dcfbfcab30fc4ea9f124ba32a9b3df0e0ec64e31c939da13af8f614
-
Size
132KB
-
MD5
6ba8f1b16e180feb8b13b348d50e052a
-
SHA1
2a8bd5fafb3bcebc471d22ea0b81f9cb480aa80a
-
SHA256
a25104fa5dcfbfcab30fc4ea9f124ba32a9b3df0e0ec64e31c939da13af8f614
-
SHA512
a65eebbf54a46202ca33c408d47bae11b82b65d0fac9cf036c70de66481d4dfbd1ba2ae68fdf521152b8884fd301271da4bf107abf79c8bd4dacbb8f35ca0bba
-
SSDEEP
1536:dxljCjglNSr0NL2iXu7gwo8c8zO23ldVk4cpVBfg1/nhk4KtkLfCE+B:d/j8gmVQu7i8cF23th41XB
Malware Config
Signatures
-
Emotet family
Files
-
a25104fa5dcfbfcab30fc4ea9f124ba32a9b3df0e0ec64e31c939da13af8f614.dll windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ