emotet | 28ac89b3a367e20a6981d3517a8cd212f43cfeeed555ead4f189d02d84fb7aa2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28ac89b3a367e20a6981d3517a8cd212f43cfeeed555ead4f189d02d84fb7aa2
Size

132KB
MD5

50f69bbc76bfc21c5246e4a1a0c019fa
SHA1

fe8611ef2c5bbbdae0650c53a8403f0f78798051
SHA256

28ac89b3a367e20a6981d3517a8cd212f43cfeeed555ead4f189d02d84fb7aa2
SHA512

36b483abdff319c3d808cde7f8d54d47dc305c6ed4b5e87d41ba162e74ddbf5b3394ec74f115afa83dffe5af1f56c93e8150467d0648450e28594239a76e6358
SSDEEP

1536:dxljCjglNSr0NL2iXu7gwo8c8zO23ldVk4cpVBfg1/nhk4KtkLfCE+B:d/j8gmVQu7i8cF23th41XB

Score

10^/10

emotet

Malware Config

Signatures

Emotet family
emotet

Files

28ac89b3a367e20a6981d3517a8cd212f43cfeeed555ead4f189d02d84fb7aa2
.dll windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ