CelestialInstaller[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CelestialInstaller.exe
Size

2.8MB
MD5

5b74004990b428388bb0c6039b6c435e
SHA1

f353e5435449c75062decad8cf8c6ad320c03796
SHA256

e0e07dce44e6dd922e6259f300cbc837e4375b5550a32e0919243f8bd4eeee64
SHA512

1605e611c03badb53919cf293f4d31483c98c41ad231d99e1ccc4ee8922072bf7df6d319383fc74af6b297826d8fe067affda89235984e4e3cc38c7812546301
SSDEEP

49152:YVi1GteK1fJlvmDbyNSYnrt87cwLmzs8jkWC11QSFmJfI49dUTAnYWx:6i1GBtJxYeRxzjjSFUfI4dUsnT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CelestialInstaller.exe

Files

CelestialInstaller.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ