bell[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bell.exe
Size

2.5MB
MD5

364dd6555bd62db00ac295606d69bd6e
SHA1

38cef9f42912e15345fbf58ccfa7fbb14d3dd1b7
SHA256

a5cf45a91413410aaf1789107fc5aef7b2e667a1e599b777c069c48af70b13c8
SHA512

dbd4b004a9f171f0f7ec03934ab177485945c42996671cb221d2cf7b131fabe26eabfad00148b494888b6472dc82f647f9b21c74a774e1c9d50c0d1a87008062
SSDEEP

49152:/cxFAB6jnfMp+y1mqY4BEWi9+1rUSOsx/JsLdcCJKzYpIBs0pMke2mc:EkBCnf3yAqZbp6OxodVJKxSYMk2c

Score

1^/10

Malware Config

Signatures

Files

bell.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ