Behavioral task
behavioral1
Sample
21d4be2f2374dafce4f48b04c27b2e93681d131bc5ca6f7c14ef3eb8240d4d62.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
21d4be2f2374dafce4f48b04c27b2e93681d131bc5ca6f7c14ef3eb8240d4d62.dll
Resource
win10-20220812-en
General
-
Target
21d4be2f2374dafce4f48b04c27b2e93681d131bc5ca6f7c14ef3eb8240d4d62
-
Size
134KB
-
MD5
72e3b0d56dd674cf13c63bd7fb526e5c
-
SHA1
32bde428cd3be78ec5771c247a7d2c69ed5fcc9f
-
SHA256
21d4be2f2374dafce4f48b04c27b2e93681d131bc5ca6f7c14ef3eb8240d4d62
-
SHA512
5e1cb0efb883b2074b006251e4eb494e08d8215dc6e8626d969a0cfa25ad51cb77d038ad76ba07a89674dabf2cb46cf0e460342d722c4513e76546958c85cf2e
-
SSDEEP
3072:hjrYI9Pe2rD0+VM5AZqwglTfKmE+59B4VnqzfgrPN:JNPeazVIAZqwglTSSHB4RqDU
Malware Config
Signatures
-
Emotet family
Files
-
21d4be2f2374dafce4f48b04c27b2e93681d131bc5ca6f7c14ef3eb8240d4d62.dll windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ