CELERYOHMYUFUFUFUFU[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CELERYOHMYUFUFUFUFU.exe
Size

1.0MB
MD5

b005faf634370b200e424cd50e39b12b
SHA1

41efa26ec6265aa3ed0694f785e29c4561870474
SHA256

8ae8cd1075496cbe998f40eb1cb652f5a06479b132cc717a311c12786db81e2d
SHA512

6bbc2ac365a6f086d33e96a6457db1e09893b704c77390c1cd2b13878b115c39dab6df4df24988a0f315c539ad415927ea0a1fd3643009d3c8e7fd07887ea1d6
SSDEEP

24576:TrxmSbyf5UPFYJlvxR9qaM/2Z/x2fnLkDxfQOmH:ryRcSu2D2fLFOmH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CELERYOHMYUFUFUFUFU.exe

Files

CELERYOHMYUFUFUFUFU.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ