General

  • Target

    9774223c733f62aacd395e6464d5c1c5

  • Size

    2.0MB

  • MD5

    9774223c733f62aacd395e6464d5c1c5

  • SHA1

    9890b9fdc4bfa9b3370c70b8d1b043937070f3bb

  • SHA256

    bf9d63622b89c0b71ddd97a1b6109c08046d5c7262371ea93380a67d5a281b90

  • SHA512

    bcb0377f05e565e65f36db4d0c9cde2ac778aac11c87d8930b3f7a21dc91bf8de5474f384370b253813082cb3646d253a2a9276cdf457fb71623722f180d144d

  • SSDEEP

    49152:T40DKrAjomgIKtWNojoALp17UMEpi4qudBBJO3gXzNsHgxUS1Q:T40DKrzIKt2A3GKudBBQQXDxUSi

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 9774223c733f62aacd395e6464d5c1c5
    .rar
  • Setup.exe
    .exe windows:4 windows x86 arch:x86

    3c1b27083f9fe9eb9b4f9671a370a84d


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7d85f9c30f9e87a65fff848de2c96ac1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • BD.exe
    .exe windows:4 windows x86 arch:x86

    3c1b27083f9fe9eb9b4f9671a370a84d


    Headers

    Imports

    Sections

  • Cerberus.chm
    .chm
  • Cerberus.exe
    .exe windows:4 windows x86 arch:x86

    5702e41e9fe517923de72786df566f36


    Headers

    Imports

    Exports

    Sections

  • Cerberus.wsdl
    .xml
  • EULA.rtf
    .rtf
  • File_id.diz
  • History.txt
  • Readme.txt
  • cerberus.ico
  • log4j.dtd
    .xml
  • log4j.xml
    .xml
  • order.htm
    .html
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    3c1b27083f9fe9eb9b4f9671a370a84d


    Headers

    Imports

    Sections

  • $TEMP/BaiDuAD.exe
    .exe windows:4 windows x86 arch:x86

    3c1b27083f9fe9eb9b4f9671a370a84d


    Headers

    Imports

    Sections

  • webadmin/images/blue.gif
    .gif
  • webadmin/images/cftp.gif
    .gif
  • webadmin/images/down.gif
    .gif
  • webadmin/images/fiftyfive.png
    .png
  • webadmin/images/green.gif
    .gif
  • webadmin/images/left.gif
    .gif
  • webadmin/images/p.gif
  • webadmin/images/pixel.gif
    .gif
  • webadmin/images/right.gif
    .gif
  • webadmin/images/space.gif
    .gif
  • webadmin/images/spacer.gif
    .gif
  • webadmin/images/trans.gif
    .gif
  • webadmin/images/twenty.png
    .png
  • webadmin/images/twentystrong.png
    .png
  • webadmin/images/up.gif
    .gif
  • webadmin/index.begin.template
    .html
  • webadmin/index.end.template
  • webadmin/style.css
  • Blog.url
  • ˵.txt
  • .rtf
    .rtf
  • snap1.jpg
    .jpg
  • 下载说明.htm
    .html .js polyglot
  • 汉化说明.txt