D:\VisualApps\CeleryAPI\CeleryAPI\obj\Debug\CeleryAPI.pdb
Static task
static1
Behavioral task
behavioral1
Sample
exploit-main.zip
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
exploit-main.zip
Resource
win10v2004-20240426-en
General
-
Target
exploit-main.zip
-
Size
20KB
-
MD5
137738ecfa15a2455384a60284085aa7
-
SHA1
116c6ac7790905ccd9f103867a82a8c90c675c4d
-
SHA256
8db537303b92a9c4b5981f1fef176af15de4e76f84d312b864745ced3542f254
-
SHA512
6f5aa8e7fcb4556e6f8579056e58a06cf722790e4ea80bc213116ac6db2012e624f44ff6a59eaa1cfccadbbbdf5b707c1ee85e3028d14a857aab0dabf0645dac
-
SSDEEP
384:SgSXoZLdbHjTxRBiO7xVx7hgyLDhll3oVTtBoIt1JO98KPUKcC/FtSuYgX/UVULh:oojxjN7vhdfctB9DNucC/zSuYgpN1jP5
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/exploit-main/CeleryAPI.dll unpack001/exploit-main/exploit.exe
Files
-
exploit-main.zip.zip
-
exploit-main/CeleryAPI.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 932B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
exploit-main/exploit.application
-
exploit-main/exploit.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\justi\source\repos\exploit\exploit\obj\Release\exploit.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
exploit-main/exploit.exe.config
-
exploit-main/exploit.exe.manifest
-
exploit-main/exploit.pdb
-
exploit-main/exploit.sln