CeleryApp[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CeleryApp.exe
Size

8.7MB
MD5

76a355bac0e92a1a70e72c950f4454b4
SHA1

b21f1f0649bddd6dd879b25e0c603c04761188fd
SHA256

ea5493c1b0a0cc6541ad76301b6abd2d94577283f731d4b46328555bf7f437e7
SHA512

f8115321b930c7d8d7ab592450744e0efd9ca47d907fd23143aeb7edcc79052892f67786681125b569a08b7d238f41ee8cbc2383b00541b3d82ce0d57e2f1688
SSDEEP

98304:qza5igLIRfyC7egWJ3PJzdjf4fwraOWcD9XdMPABIw/t6KHDicVwzUsSp:q5guhega4fJOWs9XNBZ16M2cuU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CeleryApp.exe

Files

CeleryApp.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Javan\source\repos\CeleryApp\CeleryApp\CeleryApp\obj\Release\CeleryApp.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8.7MB - Virtual size: 8.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ