2019-05-01-Emotet-binary-retrieved-by-Word-macro[.]exe

Resubmissions

09/02/2023, 21:39

230209-1hrgmseh81

09/02/2023, 21:36

230209-1f1mjaef6410

Sharing

Copy URL Twitter E-mail

General

Target
2019-05-01-Emotet-binary-retrieved-by-Word-macro.exe
Size 168KB
Sample230209-1f1mjaef64
SHA256 2032acdf04511314d53f51d1fef7f9e62e69abbe3db0b31a0302a8545ab1bd82
MD5 84d164fbfe0982a00404cb3d7b164bf5
SHA1 e068cd94e06c1f592a2d16ac2adc52c2ce506fa5
SHA512 be33a2f96c68ff640a1f59241969fb27971305ecf251c2f8422d3e5a6b0bf609580a7360db3fa3c0355c956f19efec5f7d2f69e947e8f3c979f930ee1761da04
SSDEEP 3072:tzFEhjHHIUjCgArLEZXApH3UHE360ESYUzp8t:1FWHIU2Y9KEHE36FS5p8t
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

2019-05-01-Emotet-binary-retrieved-by-Word-macro.exe

.exe 168KB

2019-05-01-Emotet-binary-retrieved-by-Word-macro.exe

IMPHASH 1d002a346878e0bbec83859aa14cce23
SHA256 2032acdf04511314d53f51d1fef7f9e62e69abbe3db0b31a0302a8545ab1bd82
MD5 84d164fbfe0982a00404cb3d7b164bf5
SHA1 e068cd94e06c1f592a2d16ac2adc52c2ce506fa5
SHA512 be33a2f96c68ff640a1f59241969fb27971305ecf251c2f8422d3e5a6b0bf609580a7360db3fa3c0355c956f19efec5f7d2f69e947e8f3c979f930ee1761da04
SSDEEP 3072:tzFEhjHHIUjCgArLEZXApH3UHE360ESYUzp8t:1FWHIU2Y9KEHE36FS5p8t
MD5 SHA1 SHA512 SSDEEP

windows x86

PE Signature issue

Digest

23:6e:70:59:02:d6:e1:5d:23:83:f9:3a:c0:84:d7:2b:08:8a:78:dc:53:d8:73:4e:0b:01:b3:9e:bf:e7:06:76

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

8692

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetProcAddress GetModuleHandleW lstrcmpiA LocalFree LocalAlloc Sleep VirtualFree VirtualAlloc SwitchToThread GetACP GetSystemInfo GetTickCount QueryPerformanceCounter GetVersion GetCurrentThreadId VirtualQuery WideCharToMultiByte MultiByteToWideChar lstrlenW lstrcpynW LoadLibraryExW IsValidLocale GetSystemDefaultUILanguage GetStartupInfoA GetModuleFileNameW GetUserDefaultUILanguage GetLocaleInfoW GetLastError GetCommandLineW FreeLibrary FindFirstFileW FindClose ExitProcess ExitThread CreateThread CompareStringW WriteFile UnhandledExceptionFilter RtlUnwind RaiseException GetStdHandle DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection CloseHandle TlsSetValue TlsGetValue lstrcmpW WritePrivateProfileStringW WaitForSingleObject WaitForMultipleObjectsEx VirtualQueryEx VirtualProtect SuspendThread SizeofResource SetThreadPriority SetThreadLocale SetLastError SetFilePointer SetEvent SetErrorMode SetEndOfFile ResumeThread ResetEvent ReadFile MulDiv LockResource LoadResource LoadLibraryW GlobalUnlock GlobalLock GlobalFree GlobalFindAtomW GlobalDeleteAtom GlobalAlloc GlobalAddAtomW GetVersionExW GetThreadPriority GetThreadLocale GetPrivateProfileStringW GetModuleFileNameA GetLocalTime GetFullPathNameW GetFileAttributesW GetExitCodeThread GetDiskFreeSpaceW GetDateFormatW GetCurrentThread GetCurrentProcessId GetCurrentProcess GetCPInfoExW GetCPInfo FreeResource InterlockedExchangeAdd InterlockedExchange InterlockedCompareExchange FormatMessageW FindResourceW FindNextFileW FileTimeToLocalFileTime FileTimeToDosDateTime EnumSystemLocalesW EnumCalendarInfoW CreateFileW CreateEventW GetModuleHandleA

user32

GetProcessWindowStation GetQueueStatus LoadCursorFromFileW PaintDesktop CharUpperA IsWindow GetSysColorBrush IsClipboardFormatAvailable AnyPopup CloseWindowStation GetDesktopWindow GetClipboardOwner GetThreadDesktop GetCaretBlinkTime DestroyWindow GetKeyState IsIconic GetTopWindow GetSysColor GetListBoxInfo CharNextW IsWindowVisible GetSystemMetrics EnumWindows FindWindowA ExitWindowsEx SetWindowLongA GetSystemMenu InsertMenuA LoadImageA GetMenuItemCount MessageBeep GetDlgItem SetRectEmpty PtInRect PostThreadMessageA GetFocus CopyRect GetMessagePos ScreenToClient GetDC ReleaseDC GetClientRect GetWindowRect OffsetRect GetAsyncKeyState SetParent IntersectRect wsprintfA LoadBitmapA FindWindowExA SetForegroundWindow MessageBoxA InvalidateRect KillTimer GetParent SetTimer EnableWindow PostMessageA LoadIconA SendMessageA GetWindowTextA MessageBoxExA LoadStringA LoadStringW wsprintfW SystemParametersInfoA GetActiveWindow GetForegroundWindow

gdi32

DeleteObject UpdateColors GetLayout CreateMetaFileW DeleteEnhMetaFile GetTextAlign GetDCPenColor CloseMetaFile CreateMetaFileA FillPath RealizePalette EndDoc SwapBuffers GetFontLanguageInfo GetSystemPaletteUse Pie

advapi32

RegOpenKeyA RegQueryValueExA

msvcrt

_except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit _onexit __dllonexit _controlfp