Static task
static1
Behavioral task
behavioral1
Sample
Celex.exe
Resource
win10-20240319-en
Behavioral task
behavioral2
Sample
Celex.exe
Resource
win10v2004-20240226-en
General
-
Target
Celex.exe
-
Size
6.8MB
-
MD5
d550b8fbf57f2876c8308c7fd52025e6
-
SHA1
1933ff94dd7de1cbe01e71154053b7e46b1f61fb
-
SHA256
0693684117df72f1c9ac9d4f84548c76de7bfc73f8abf41fc28f65767fe5ffad
-
SHA512
63affe3499e5e371adff4b48898d36b09128c60d8f56e7593175fd4a4347f23b053601337633606e863a1497038775338bc3f3c6033eafbedb69f84dc372b510
-
SSDEEP
196608:r3e3zeuPjIZyjUUM4QF8I6uDYoY5O8isZi2htfF:r3eL2yjP9QWygO8isZi2jfF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Celex.exe
Files
-
Celex.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6.8MB - Virtual size: 6.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ