2024-04-06_7f80fc17e7a23c8a63da3803717c4ee1_cerber | Triage

Sharing

General

Target

2024-04-06_7f80fc17e7a23c8a63da3803717c4ee1_cerber
Size

196KB
MD5

7f80fc17e7a23c8a63da3803717c4ee1
SHA1

ad28eae2424b3d9c9bf7d2069cf7a98f9c97b824
SHA256

1d4f32e78820a5beaeb4eaa529b6f7fa1abb1fef5e02c62acf73b436e21410f5
SHA512

9eafe5ad07897d10de3f4c24b90ddebe3f40c1cc902baa3e225120ea347374c0c91f5d544caac706b5fd15df076bef24e9f2c83dd0b1210b14241aa1273eaf94
SSDEEP

6144:R3x12BaZmbYU2E+aWQLo/5VX9dBpDtIjkw/:Rh12BawZ2ECQ87B3k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-06_7f80fc17e7a23c8a63da3803717c4ee1_cerber

Files

2024-04-06_7f80fc17e7a23c8a63da3803717c4ee1_cerber
.exe windows:5 windows x86 arch:x86

ebce88cab5f5d3d7b4f28f267a127ce7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

memmove
isspace
tolower
_aulldvrm
memset
memcpy
_allmul
_alldiv
RtlUnwind
NtQueryVirtualMemory

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 129KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE