C:\Users\stent\Desktop\Programming\C#\Celery\Celery\obj\Release\Celery.pdb
Static task
static1
General
-
Target
Celery.exe
-
Size
17.3MB
-
MD5
3abca1b204b3ca5ccaf2445b447517b7
-
SHA1
0fba9faa2ea0e4d19c2aa28ca23596643cae7d8a
-
SHA256
bb43675318cfeb7bd644a7007b44743a08394adb416bbab6f9840f78b3676b25
-
SHA512
b66b853820313a92995902c4428d6647b126bab92df42409709b00ea9176882ce2cacf7df032bad1d12fa74f6e075d2e919a63973704a8cfdda5e94bd098cdd8
-
SSDEEP
393216:uAo57DdNAuyvw4wK/gsrlVwgqI59D8exrbwANXg5yH4LVvI/:Y1d2toVKrR5qI59woPXlOLm/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Celery.exe
Files
-
Celery.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 17.2MB - Virtual size: 17.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ