General

  • Target

    V3.rar

  • Size

    639KB

  • MD5

    e57b695adf0f4c97b6686af89ed4c49e

  • SHA1

    30f86c1008042f67678bab45f883b4f78919c7e0

  • SHA256

    d712156900953d2c1a7d82e0b604a66ac71942c3901969e83feda4e57b2ffb02

  • SHA512

    3a417d04dbf1f6f18b7fd3d3500c0b625355742f581808708076fecf8444ac333b3400c46e75e2e2fa5661466be41921be5c0cf40543b0be77fcf00af3f90b2e

  • SSDEEP

    12288:nOt+IfkLeNi1KxhmKElb1L9K0CqpZAd1pOaFWLVLVZ6kz:OorL6VhK1BTgvOa+Jb

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • V3.rar
    .rar
  • V3/CeleryAPIR.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • V3/CeleryIn.bin
    .dll windows:6 windows x64 arch:x64

    fe78118d64d767d704fee2343d26ea59


    Headers

    Imports

    Exports

    Sections

  • V3/CeleryInject.exe
    .exe windows:6 windows x64 arch:x64

    2815423b12fff7c32f137d69c0403656


    Headers

    Imports

    Sections