2024-05-24_2d32a7733dbc288d5e6e0cf9fae4c7af_cerber | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-24_2d32a7733dbc288d5e6e0cf9fae4c7af_cerber
Size

206KB
MD5

2d32a7733dbc288d5e6e0cf9fae4c7af
SHA1

83c73bd2ea04758fbaa63942c281656d417612ba
SHA256

bda11ef9322d36cd29afe729020ac73f74f080eba4d2e6d93855ec0faf10e86a
SHA512

a12bd04a9cb488b2c92eca1cb5b83f1ad04b5ee35991d003fed3e914544678a6ab8950629724df7cb80eee7b7f50145702ca14f5817b516c11b22140b323b239
SSDEEP

6144:d/36Bl0DNs6o1fWW115ENhO3zhZpYIEH:t36BlOtodWWv5qO3zhz+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-24_2d32a7733dbc288d5e6e0cf9fae4c7af_cerber

Files

2024-05-24_2d32a7733dbc288d5e6e0cf9fae4c7af_cerber
.exe windows:5 windows x86 arch:x86

96d58872355fc138000cba4495a5ec42

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

tolower
isspace
memmove
_aulldvrm
memset
memcpy
_allmul
_alldiv
RtlUnwind
NtQueryVirtualMemory

user32

GetWindowLongW
ShowWindow
UpdateWindow
DestroyWindow
keybd_event
SendMessageW
SetFocus
SetForegroundWindow
GetMessageW
SetWindowTextW
GetSystemMetrics
SetWindowLongW
GetAncestor

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 129KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ