faa39c7bcd1d2fc0cf232c925f16d799_cerber_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

faa39c7bcd1d2fc0cf232c925f16d799_cerber_JC.exe
Size

172KB
MD5

faa39c7bcd1d2fc0cf232c925f16d799
SHA1

c24cc8c190dcdcb16f19644ee0b6b523d598371e
SHA256

237f9c938e6359b7d78f0998ca9e29933813c6fd9fdaba11137e9b75c890b737
SHA512

180ca16c62925b7cda108e181c9fe6365bf47091e32ea2413c6a4d3986f201d268f110fa7af6b84f3003ad996fef15430c18f228038e05a97465f9053a18a1f2
SSDEEP

3072:aehnaR6ueHeleaZProDe3zWB/pXlqxLoxu/4Q6/t+fr3:aCuyelZlroDejWB/pYo64N/Mz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faa39c7bcd1d2fc0cf232c925f16d799_cerber_JC.exe

Files

faa39c7bcd1d2fc0cf232c925f16d799_cerber_JC.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ