CeltaWare[.]CBS[.]CIP[.]UI[.]WinApp[.]exe | Triage

Sharing

General

Target

CeltaWare.CBS.CIP.UI.WinApp.exe
Size

40KB
MD5

37012a289863f9288fa91dbaa5e9a41b
SHA1

c9fd78d372d87f5c06febd0f6f8c5a991b050a5d
SHA256

a546f0f9f29991e1491f648d4c5508c96427025ecb772d09b87816df725c5e2b
SHA512

3f8f8d51d26d79e6c9f499bd81ec8f5677be231a00d2370063454a4d48f8b0ebf38f33ef6dff837af659b51bd325f471e4fedc52981414c24957d93e3e1def95
SSDEEP

384:lD5GUmWzOpDT3qjIaIN0UrC4e9+2YpA3fUE0kvwKwq6uvqXM6JXMmpgXM6nXMmpJ:t5GpZDPuzYpV3lJtGlntf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CeltaWare.CBS.CIP.UI.WinApp.exe

Files

CeltaWare.CBS.CIP.UI.WinApp.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ