Static task
static1
Behavioral task
behavioral1
Sample
Hod2.exe
Resource
win7-20231215-en
General
-
Target
Hod2.exe
-
Size
1.6MB
-
MD5
a54ec23a78d07a78653bbd31919db0b5
-
SHA1
14671c64ed541d26663e240b142ef1e97b07195d
-
SHA256
8cc8396917e49ef73862b982e4a975ef8c3aad40d4c8a37df386d0c70ece330f
-
SHA512
2642adacf490fbdc391922efe23c423f5c48a40f2c71d97b3cfcc6e0809cdb22989f74022ca6d0a4bb3b00bcb388791016ea6e735606aca26d4160567ddcebcc
-
SSDEEP
24576:6Y726eutHjgK4N9hJnIDNzZ6R/6quP83V3abemHYWHdfthYuaJ5eoO84zfSJ4lFk:37he3NjwA/6PFftyRe84zfSB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Hod2.exe
Files
-
Hod2.exe.exe windows:4 windows x86 arch:x86
847a600c3ffe4e44a9fefcf30905f81d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
imm32
ImmGetContext
ImmSetOpenStatus
ImmReleaseContext
kernel32
ReadFile
CreateThread
GlobalFree
CreateEventA
CreateFileA
GetFileSize
SetFileTime
GetFileTime
WriteFile
GetTickCount
WaitForSingleObject
GetSystemDefaultLangID
GetPrivateProfileIntA
DeviceIoControl
GetFullPathNameA
CloseHandle
SetFilePointer
OutputDebugStringA
GlobalAlloc
GetStdHandle
LoadLibraryA
IsBadReadPtr
GetFileType
GetCurrentThreadId
GetWindowsDirectoryA
TlsSetValue
DeleteFileA
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
SetEvent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ResetEvent
InitializeCriticalSection
WaitForMultipleObjects
QueryPerformanceCounter
QueryPerformanceFrequency
GetDriveTypeA
GetLogicalDriveStringsA
GetVersionExA
GetPrivateProfileStringA
MultiByteToWideChar
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
RaiseException
RtlUnwind
GetProcAddress
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetOEMCP
TlsAlloc
SetLastError
TlsGetValue
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
HeapSize
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
IsBadCodePtr
SetStdHandle
FlushFileBuffers
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetEndOfFile
SetPriorityClass
GetLocalTime
CreateMutexA
user32
CallWindowProcA
ShowWindow
LoadImageA
DestroyWindow
SendMessageA
CreateWindowExA
SetFocus
SetWindowLongA
GetWindowTextA
GetWindowLongA
PeekMessageA
DefWindowProcA
ShowCursor
GetCursorPos
LoadIconA
wsprintfA
ClientToScreen
SetActiveWindow
MoveWindow
GetWindowRect
RegisterClassExA
LoadCursorA
GetSystemMetrics
UpdateWindow
WaitMessage
DispatchMessageA
TranslateMessage
GetMessageA
MsgWaitForMultipleObjects
PostMessageA
MessageBoxA
PostQuitMessage
GetParent
DrawTextA
ReleaseDC
GetDC
GetClientRect
SetCursor
SetWindowPos
RegisterClassA
GetClassInfoA
UnregisterClassA
gdi32
GetObjectA
BitBlt
DeleteDC
SelectObject
DeleteObject
CreateFontA
SetBkMode
SetTextColor
GetStockObject
StretchBlt
GetPaletteEntries
CreateCompatibleDC
ole32
CoInitialize
CoUninitialize
CoCreateInstance
dinput
DirectInputCreateEx
dsound
ord1
ddraw
DirectDrawEnumerateExA
DirectDrawCreateEx
Sections
.text Size: 776KB - Virtual size: 772KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 708KB - Virtual size: 707KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 168KB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ