Static task
static1
Behavioral task
behavioral1
Sample
2023-05-18_edbb21ac86d73457c5973b0e8ec0129b_cerber.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2023-05-18_edbb21ac86d73457c5973b0e8ec0129b_cerber.exe
Resource
win10v2004-20230220-en
General
-
Target
2023-05-18_edbb21ac86d73457c5973b0e8ec0129b_cerber
-
Size
148KB
-
MD5
edbb21ac86d73457c5973b0e8ec0129b
-
SHA1
d8263f3ea22de08b66d1a81ce7ef4cf323ced0b2
-
SHA256
f787e3aa2daa31f43ed7c42c5f3644b484f6725597d7481061986d0f44b3143f
-
SHA512
93295ed48c36b580ecd81c480473677af5c20596529a965e70ce5d2e5fa137a60757ec53459b774cbec21646945c0744c39998c466347a9dea880ab697513e1c
-
SSDEEP
3072:FAx+feo6RSH+/C+J6b0BaaQDkjcZ2qx5IR6essUDhwf:FAUd6RgGC2BBaaQDkjiIces3dw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-05-18_edbb21ac86d73457c5973b0e8ec0129b_cerber
Files
-
2023-05-18_edbb21ac86d73457c5973b0e8ec0129b_cerber.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ