celestial[.]cc[.]exe | Triage

Sharing

General

Target

celestial.cc.exe
Size

10KB
MD5

1dd512fe06ff6fc16f1523f3dbd5f662
SHA1

2408eaecba63f5a2beaaf914fd3f36152a5e65a4
SHA256

bfd0e8f20d2a1f458090e59796b2e3e582fa3db0fb6c653ead5c46329bd83ef9
SHA512

23114fc9fbfa40feaced27d77590075dba5dbd3daf0ede00ab8728e484484cabbd21a1008ff15c2f4fefa8f33ea7f74f43f048adcb3be14ffc61f61f0a7103ab
SSDEEP

192:KY3TNMCiKdLZGBvh2QSIEQExWSO5RtIyrQECEhw0uJVdgBfrH:KY3TNMCiK+BJ2qEQEjuRtI8QpEkJVGBj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
celestial.cc.exe

Files

celestial.cc.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\iby78\source\repos\celestial.cc\obj\Debug\celestial.cc.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ