2019-05-01-Emotet-binary-updated-after-initial-infection-1-of-2[.]exe

Resubmissions

15/02/2023, 09:52

230215-lv6d1aba3x10

15/02/2023, 09:50

230215-ltxepsbc5510

Sharing

Copy URL Twitter E-mail

General

Target
2019-05-01-Emotet-binary-updated-after-initial-infection-1-of-2.exe
Size 168KB
Sample230215-ltxepsbc55
SHA256 6d7aff70a84d9237bde3b149ff04532cafb29b6f358886b5038a737af5934d1f
MD5 1cc91941efd6d3da54a1054d9c9d870f
SHA1 b6531c99b2fb0c51941ac3a636c5c3cf69073f65
SHA512 bade1e20f1a892e33d20535235f0ed45b625ef8cdd1ba9a391f074d3b77f971fb63f68f6d0f97e51fa48ef211fa7bea76a56da9deb88c85dbd0aa892ae78ed69
SSDEEP 3072:5JYzFEhjHHIUjCgArLEZXApH3UHE360ESYUspf:r4FeHIU2Y9KEHE36FS2pf
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

2019-05-01-Emotet-binary-updated-after-initial-infection-1-of-2.exe

.exe 168KB

2019-05-01-Emotet-binary-updated-after-initial-infection-1-of-2.exe

IMPHASH 799ea882f6aeb8c90b34575111813eb3
SHA256 6d7aff70a84d9237bde3b149ff04532cafb29b6f358886b5038a737af5934d1f
MD5 1cc91941efd6d3da54a1054d9c9d870f
SHA1 b6531c99b2fb0c51941ac3a636c5c3cf69073f65
SHA512 bade1e20f1a892e33d20535235f0ed45b625ef8cdd1ba9a391f074d3b77f971fb63f68f6d0f97e51fa48ef211fa7bea76a56da9deb88c85dbd0aa892ae78ed69
SSDEEP 3072:5JYzFEhjHHIUjCgArLEZXApH3UHE360ESYUspf:r4FeHIU2Y9KEHE36FS2pf
MD5 SHA1 SHA512 SSDEEP

windows x86

PE Signature issue

Digest

31:44:20:3c:02:58:c7:3f:32:7d:24:7b:0d:b2:15:5f:78:57:91:3a:f3:f1:87:fd:6c:6c:14:82:42:ab:03:b3

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

8656

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetProcAddress GetModuleHandleW lstrcmpiA LocalFree LocalAlloc Sleep VirtualFree VirtualAlloc SwitchToThread GetACP GetSystemInfo GetTickCount QueryPerformanceCounter GetVersion GetCurrentThreadId VirtualQuery WideCharToMultiByte MultiByteToWideChar lstrlenW lstrcpynW LoadLibraryExW IsValidLocale GetSystemDefaultUILanguage GetStartupInfoA GetModuleFileNameW GetUserDefaultUILanguage GetLocaleInfoW GetLastError GetCommandLineW FreeLibrary FindFirstFileW FindClose ExitProcess ExitThread CreateThread CompareStringW WriteFile UnhandledExceptionFilter RtlUnwind RaiseException GetStdHandle DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection CloseHandle TlsSetValue TlsGetValue lstrcmpW WritePrivateProfileStringW WaitForSingleObject WaitForMultipleObjectsEx VirtualQueryEx VirtualProtect SuspendThread SizeofResource SetThreadPriority SetThreadLocale SetLastError SetFilePointer SetEvent SetErrorMode SetEndOfFile ResumeThread ResetEvent ReadFile MulDiv LockResource LoadResource LoadLibraryW GlobalUnlock GlobalLock GlobalFree GlobalFindAtomW GlobalDeleteAtom GlobalAlloc GlobalAddAtomW GetVersionExW GetThreadPriority GetThreadLocale GetPrivateProfileStringW GetModuleFileNameA GetLocalTime GetFullPathNameW GetFileAttributesW GetExitCodeThread GetDiskFreeSpaceW GetDateFormatW GetCurrentThread GetCurrentProcessId GetCurrentProcess GetCPInfoExW GetCPInfo FreeResource InterlockedExchangeAdd InterlockedExchange InterlockedCompareExchange FormatMessageW FindResourceW FindNextFileW FileTimeToLocalFileTime FileTimeToDosDateTime EnumSystemLocalesW EnumCalendarInfoW CreateFileW CreateEventW GetModuleHandleA

user32

GetProcessWindowStation GetQueueStatus LoadCursorFromFileW PaintDesktop CharUpperA IsWindow GetSysColorBrush IsClipboardFormatAvailable AnyPopup CloseWindowStation GetDesktopWindow GetClipboardOwner GetThreadDesktop GetCaretBlinkTime DestroyWindow GetKeyState IsIconic GetTopWindow GetSysColor GetListBoxInfo CharNextW IsWindowVisible GetSystemMetrics EnumWindows FindWindowA ExitWindowsEx SetWindowLongA GetSystemMenu InsertMenuA LoadImageA GetMenuItemCount MessageBeep GetDlgItem SetRectEmpty PtInRect PostThreadMessageA GetFocus CopyRect GetMessagePos ScreenToClient GetDC ReleaseDC GetClientRect GetWindowRect OffsetRect GetAsyncKeyState SetParent IntersectRect wsprintfA LoadBitmapA FindWindowExA SetForegroundWindow MessageBoxA InvalidateRect KillTimer GetParent SetTimer EnableWindow PostMessageA LoadIconA SendMessageA GetWindowTextA

gdi32

DeleteObject UpdateColors GetLayout CreateMetaFileW DeleteEnhMetaFile GetTextAlign GetDCPenColor CloseMetaFile CreateMetaFileA FillPath RealizePalette EndDoc SwapBuffers GetFontLanguageInfo GetSystemPaletteUse Pie

advapi32

RegOpenKeyA RegQueryValueExA

msvcrt

_except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit _onexit __dllonexit _controlfp