Celeste[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Celeste.exe
Size

2.1MB
MD5

5d82e7a108b88f18bdd9168bc4468c21
SHA1

517a16da6ff3cc1a5270e297778355c6092f401e
SHA256

bd1f3de7eb90417a83474fd5b61e4652adc320963d4af46aa62b8f46e6d08b6d
SHA512

2e864c5dc65e99e9f23b1cf98758109314c24b517a03cdf9b4bcab91dcdd47a3e0cc04da09cfe96273a2bfb612bd4b7822da9166f9a1343fd3a5b34793ab49d6
SSDEEP

12288:F67ZEJEN2bJAzDow9Xy2KsUgDaOkh7i5GSHfFOmHZThDj4NuzQtGrU117k33/Cxu:MwJaow9XnbsR33oxOw3/YxGQlbhd4KH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Celeste.exe

Files

Celeste.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ