Static task
static1
Behavioral task
behavioral1
Sample
2024-05-23_c49d9bd6233cb4a7fecf4c9d41709af2_cerber.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-05-23_c49d9bd6233cb4a7fecf4c9d41709af2_cerber.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-05-23_c49d9bd6233cb4a7fecf4c9d41709af2_cerber
-
Size
183KB
-
MD5
c49d9bd6233cb4a7fecf4c9d41709af2
-
SHA1
259a81d25c3dfcff1d005d8cd38c78f29687e65c
-
SHA256
bbc7c882c6f9deda53ae38c048bc1a08f6466f94bb6d9dab62f12433cca827ce
-
SHA512
757856060d249ba69e25386354fc861f1e417bf429483adb4838657fd5472accc16036c42b0aa953033887c5b5c9072c2ca2b616aec9cc48e205719e09938719
-
SSDEEP
3072:etmR6w66RzNbY17EtDgBf/aysbxlm4Bi5ujytXMuELb9w6Eb+/28Vo:etm166RJm7LBf/ays7GZMxwm/2x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-23_c49d9bd6233cb4a7fecf4c9d41709af2_cerber
Files
-
2024-05-23_c49d9bd6233cb4a7fecf4c9d41709af2_cerber.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ