HODE342ED[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

HODE342ED.exe
Size

1004KB
MD5

65c69888c3dbd95936e38de121f65c0f
SHA1

b185251e3787804c65860e1fba3c6c3d6119d7dc
SHA256

013e39d10c6ec3d7f91105322804e5ec7d6cff966e44659fc568957f243e67a1
SHA512

e2405f04804e0a5d131ec52885a65ec65e55e54b60065d99d0e67e9296ecefd14fc3e11072cef3f96ca02d1522ac37fa1851e11bdcded69e57376aae187c3f03
SSDEEP

12288:L6wiQPRvz0D44apBRI32kOcYrJ8y0V5cjiJBzOpXFcP3pmGCW6G9VVhI3Vum:9R70S7gdOSy0V5ADpiP3pEWLWVT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HODE342ED.exe

Files

HODE342ED.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 903KB - Virtual size: 903KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ