2019-05-01-Emotet-binary-updated-after-initial-infection-2-of-2[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
2019-05-01-Emotet-binary-updated-after-initial-infection-2-of-2.exe
Size 157KB
Sample230214-halmbabd44
SHA256 486ede4ecff9a951261af3d267072bf75a37e7812afd91dc4c30bf5535dede8b
MD5 d05d59b36d76a2d919d73e5383f0b35b
SHA1 bdd29b90d93e3bd85b2e0291e3601a45b0c8e33c
SHA512 74efa7b921beda7eff6c56ccd43eef44d4e1ec19e6bb76ccb08e879b2e491a7fffbf176b095244a73181098583d925d56f44fc9cb41c73b67c43a85224f04fc2
SSDEEP 3072:paROF9HwBJa2vMjrmok3XxK6T9f5pNF/NB+GQIiqGgyVcU4TZP8eIn:l9wBJa2EmvXxKy9FJjQIi1gyR/
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

2019-05-01-Emotet-binary-updated-after-initial-infection-2-of-2.exe

.exe 157KB

2019-05-01-Emotet-binary-updated-after-initial-infection-2-of-2.exe

IMPHASH 33f34ea3fc5507a0335080470b85e7e2
SHA256 486ede4ecff9a951261af3d267072bf75a37e7812afd91dc4c30bf5535dede8b
MD5 d05d59b36d76a2d919d73e5383f0b35b
SHA1 bdd29b90d93e3bd85b2e0291e3601a45b0c8e33c
SHA512 74efa7b921beda7eff6c56ccd43eef44d4e1ec19e6bb76ccb08e879b2e491a7fffbf176b095244a73181098583d925d56f44fc9cb41c73b67c43a85224f04fc2
SSDEEP 3072:paROF9HwBJa2vMjrmok3XxK6T9f5pNF/NB+GQIiqGgyVcU4TZP8eIn:l9wBJa2EmvXxKy9FJjQIi1gyR/
MD5 SHA1 SHA512 SSDEEP

windows x86

PE Signature issue

Digest

43:b5:77:fa:f3:87:8f:bb:f3:d8:ba:2c:06:e0:58:a7:f4:b0:30:d6:cc:22:3d:f5:e9:16:8b:3f:d5:8e:ed:10

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

5968

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileSize GetFileType GetLastError GetLocaleInfoA GetLogicalDrives GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetOEMCP GetPriorityClass GetProcAddress GetProcessAffinityMask GetProcessHeap GetProcessIoCounters GetProcessVersion GetStartupInfoA GetStartupInfoW GetStdHandle GetStringTypeA GetStringTypeW GetSystemDirectoryA GetSystemDirectoryW GetSystemTime GetSystemTimeAsFileTime GetTempPathW GetThreadContext GetThreadLocale GetThreadPriority GetTickCount GetVersion GetVersionExA GetVersionExW GetVolumeInformationA GetVolumeInformationW GetWindowsDirectoryA GetWindowsDirectoryW GlobalAddAtomW GlobalAlloc GlobalDeleteAtom GlobalFindAtomW GlobalFree GlobalHandle GlobalLock GlobalReAlloc GlobalSize GlobalUnlock HeapAlloc HeapCreate HeapDestroy HeapFree HeapReAlloc HeapSize InitializeCriticalSection InterlockedCompareExchange InterlockedDecrement InterlockedIncrement IsDebuggerPresent IsValidCodePage LCMapStringA LCMapStringW LeaveCriticalSection LoadLibraryA LoadLibraryExA LoadLibraryExW LoadLibraryW LoadResource GetFileAttributesW LocalFileTimeToFileTime LocalFree LockResource MapViewOfFile MulDiv MultiByteToWideChar OpenEventA OpenFileMappingA OpenMutexW OpenProcess OutputDebugStringW PulseEvent QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadFile ReadProcessMemory ReleaseMutex ReleaseSemaphore ResetEvent ResumeThread RtlUnwind SetConsoleDisplayMode SetConsoleTitleA SetEvent SetFilePointer SetHandleCount SetLastError SetPriorityClass SetStdHandle SetThreadAffinityMask SetThreadContext SetThreadPriority SetUnhandledExceptionFilter SizeofResource Sleep SuspendThread SystemTimeToFileTime TerminateProcess TerminateThread TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter UnmapViewOfFile VirtualAlloc VirtualFree VirtualProtect VirtualProtectEx VirtualQuery VirtualQueryEx WaitForMultipleObjectsEx WaitForSingleObject WideCharToMultiByte WriteConsoleA WriteConsoleW WriteFile WriteProcessMemory lstrcatA lstrcmpA lstrcmpiA lstrcpyA lstrlenA lstrlenW GetFileAttributesA GetExitCodeThread GetExitCodeProcess GetEnvironmentStringsW GetEnvironmentStrings GetDriveTypeW GetCurrentThreadId GetCurrentThread GetCurrentProcessId GetCurrentProcess GetModuleHandleW GetConsoleTitleA GetConsoleOutputCP GetConsoleMode GetConsoleCP GetCommandLineW GetCommandLineA GetCPInfo GetACP FreeResource FreeLibrary FreeEnvironmentStringsW FreeEnvironmentStringsA FormatMessageW FormatMessageA FlushFileBuffers FindResourceW FindResourceA FindNextFileW FindFirstFileW FindFirstFileA FindClose FileTimeToDosDateTime ExitProcess EnumResourceNamesW EnterCriticalSection DuplicateHandle DeleteCriticalSection CreateThread CreateSemaphoreW CreateProcessW CreateProcessA CreateMutexW CreateMutexA CreateJobObjectW CreateFileW CreateFileMappingW CreateFileMappingA CreateFileA CreateEventW CreateEventA CopyFileW CompareStringW CloseHandle VirtualAllocEx LocalAlloc

user32

IsZoomed KillTimer LoadAcceleratorsW LoadBitmapW LoadCursorW LoadIconW LoadImageW LoadKeyboardLayoutW LoadStringW LookupIconIdFromDirectory MessageBoxW MsgWaitForMultipleObjects OemToCharA OffsetRect OpenWindowStationA PostMessageA PostMessageW PostQuitMessage PostThreadMessageA RegisterClassExW RegisterHotKey RegisterWindowMessageW ReleaseDC RemovePropA ReuseDDElParam ScrollDC SendInput SendMessageA SendMessageCallbackA SendMessageTimeoutA SendMessageTimeoutW SendMessageW SetClassLongW SetClipboardData SetCursorPos SetForegroundWindow SetParent SetPropA SetTimer SetWindowLongW SetWindowPlacement SetWindowPos SetWindowRgn ShowOwnedPopups ShowWindow SystemParametersInfoW TabbedTextOutA TranslateAcceleratorW TranslateMessage UpdateWindow WaitForInputIdle wsprintfW wvsprintfA IsWindowVisible GetSystemMetrics GetSystemMenu GetPropA GetParent GetMessageW GetMenuInfo GetMenu GetIconInfo GetForegroundWindow GetDC GetClipboardFormatNameA GetClientRect GetClassWord GetClassNameA GetClassLongW GetAsyncKeyState GetActiveWindow FrameRect FindWindowW FindWindowExW FindWindowExA EnumWindows EnumThreadWindows EnumDisplaySettingsW EnumDisplayDevicesW EnumDesktopWindows EndPaint EndDialog EnableWindow EnableMenuItem DrawTextW DrawFrameControl DrawFocusRect DispatchMessageW DialogBoxParamW DestroyWindow DestroyIcon DefWindowProcW DefDlgProcW DdeGetData CreateWindowExW CreatePopupMenu CreateMDIWindowA CreateDesktopA CharUpperW CharUpperBuffW IsWindowUnicode IsWindowEnabled IsWindow IsIconic IsCharAlphaNumericW InvalidateRect InflateRect ImpersonateDdeClientWindow IMPQueryIMEA GetWindowThreadProcessId GetWindowRect GetWindowPlacement GetWindowLongW GetWindow AdjustWindowRectEx AnimateWindow AttachThreadInput BeginPaint CallMsgFilter CascadeChildWindows ChangeDisplaySettingsExW CharLowerW GetUserObjectInformationW GetThreadDesktop GetTopWindow ChildWindowFromPointEx

gdi32

cGetTTFFromFOT SetDIBits RectInRegion GetDeviceGammaRamp GetCharacterPlacementA GdiConvertToDevmodeW GdiConvertBitmap FlattenPath FONTOBJ_pifi EudcLoadLinkW EngReleaseSemaphore EngQueryLocalTime EngEraseSurface DescribePixelFormat CreateEllipticRgn

advapi32

CryptReleaseContext LookupAccountSidW LookupAccountSidA InitializeSecurityDescriptor GetUserNameW GetTokenInformation GetLengthSid GetKernelObjectSecurity SetSecurityDescriptorDacl ReportEventW RegisterEventSourceW RegUnLoadKeyW RegOpenKeyExA RegLoadKeyW RegCloseKey RegQueryValueExA RegOpenKeyA CryptAcquireContextA CryptCreateHash CryptDecrypt CryptDestroyHash CryptDestroyKey CryptExportKey CryptGetProvParam CryptGetUserKey CryptImportKey CryptSignHashA CryptSetHashParam CryptSetProvParam OpenProcessToken

shell32

SHGetDataFromIDListW Shell_NotifyIconW ExtractAssociatedIconA FindExecutableA SHCreateDirectoryExW SHFileOperation SHFormatDrive WOWShellExecute SHGetDesktopFolder SHGetFolderPathA SHGetPathFromIDListA ShellAboutA ShellExecuteW

ole32

OleUninitialize GetHGlobalFromStream CreateStreamOnHGlobal CoUninitialize CoTaskMemFree CoInitialize CoCreateInstance CoCreateGuid

shlwapi

StrRStrIW StrCmpNIA

comctl32

ImageList_Create ImageList_Destroy ImageList_GetIcon ImageList_GetIconSize ImageList_GetImageCount ImageList_Read ImageList_ReplaceIcon ImageList_Write