hellz[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

hellz.exe
Size

307.0MB
MD5

999c0e4a99d73ce8b10acecb6e61e51b
SHA1

7321225ea44ca74fe97692117ff76a9754850b28
SHA256

171bd35e1e4211a26484cbd33f3dc370db67357c827d233959ed82cfd7a315fa
SHA512

0dc0ea9db04deb375797d4870ea9d8a1b0673a4e49ed2cf1035185f096f1e069bda24e0cbcaa50a77be609b7050bbf1ceed45d7f0e54f45e13fda2e3022e0413
SSDEEP

98304:XXGhy2X6iL/Q2vkYFPK6me1/QPN1bnXK1pBvmAZDyw+3wcbFM3/wxCCzt3+EkZA:GYg6ivcYY6meObbnXCBvmAZmw+oG3O9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
hellz.exe

Files

hellz.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7.0MB - Virtual size: 7.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ