2024-12-14_168e44f18826273e887431533e504b82_cerber

Sharing

Copy URL

Twitter E-mail

General

Target

2024-12-14_168e44f18826273e887431533e504b82_cerber
Size

655KB
MD5

168e44f18826273e887431533e504b82
SHA1

ce356a1234a0468885246ce99e1033a771771b50
SHA256

00722a1c17d28a74904dc5c2a8f7a0604f68e229b2736d357247d786c54464d4
SHA512

fb3d51c92dfca0914c8d8acdc88e32afc277591c1d4fbd6dcdcae2072fa7790893cb4a0b556d8af797793d211a3deef3b1cd5f0958cf02add2513a8cb473118c
SSDEEP

6144:QqkZeCLQIqSY9lHir4mwA2MhhIsXt2Y7rr/QF:3yxiCHrFhIKtBfbQF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-12-14_168e44f18826273e887431533e504b82_cerber

Files

2024-12-14_168e44f18826273e887431533e504b82_cerber
.exe windows:5 windows x86 arch:x86

04e223ad6e95a35241271104fc0972bb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
GetSystemDirectoryW
GetSystemTime
GetSystemTimeAsFileTime
GetTempFileNameW
GetTempPathW
GetThreadSelectorEntry
GetTickCount
GetVersion
GetVersionExW
GetWindowsDirectoryW
GlobalAlloc
GlobalFree
GlobalGetAtomNameA
GlobalLock
GlobalUnlock
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsBadHugeReadPtr
IsValidCodePage
LCMapStringW
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalFree
Module32FirstW
MoveFileW
MulDiv
MultiByteToWideChar
OpenProcess
QueueUserAPC
ReadFile
GetStartupInfoA
RemoveDirectoryW
SearchPathW
SetCurrentDirectoryW
SetDefaultCommConfigW
SetErrorMode
SetFileAttributesA
SetFileAttributesW
SetFilePointer
SetFileTime
SetLastError
SetStdHandle
SystemTimeToFileTime
Thread32Next
TransactNamedPipe
TryEnterCriticalSection
VerifyVersionInfoW
WaitForSingleObject
WideCharToMultiByte
WriteFile
WritePrivateProfileStringW
_lcreat
_lread
lstrcatA
lstrcatW
lstrcmpW
lstrcmpiA
lstrcmpiW
lstrcpyA
lstrcpyW
lstrcpynA
lstrcpynW
lstrlenA
lstrlenW
GetShortPathNameW
GetPrivateProfileStringW
GetPrivateProfileStringA
GetModuleHandleW
GetModuleFileNameW
GetLastError
GetFullPathNameW
GetFileTime
GetFileSize
GetFileAttributesW
GetExitCodeProcess
GetDiskFreeSpaceW
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
GetComputerNameW
GetComputerNameExW
GetComputerNameExA
GetCommandLineW
GetCommModemStatus
FreeLibrary
FormatMessageA
FindResourceW
FindNextFileW
FindNextFileA
FindFirstFileW
FindFirstFileExA
FindFirstFileA
FindClose
FillConsoleOutputCharacterW
FileTimeToSystemTime
ExpandEnvironmentStringsW
ExitThread
ExitProcess
EnumSystemLocalesA
DisableThreadLibraryCalls
DeleteTimerQueue
DeleteFileW
DeleteFileA
CreateThread
CreateProcessW
CreateProcessA
CreateFileW
CreateEventA
CreateDirectoryW
CreateDirectoryExW
CopyFileW
CompareFileTime
CloseHandle
ClearCommError
GetModuleHandleA
LoadLibraryA
GetProcAddress
Sleep
GetCPInfo
RemoveDirectoryA
CreateFileA

user32

GetMessageW
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetWindow
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowThreadProcessId
InflateRect
InvalidateRect
IsDialogMessageW
IsWindow
IsWindowEnabled
IsWindowUnicode
KillTimer
LoadBitmapW
LoadCursorW
LoadImageA
LoadImageW
LoadStringW
MessageBeep
MessageBoxA
MessageBoxIndirectW
MessageBoxW
OffsetRect
OpenClipboard
PeekMessageA
PeekMessageW
PostMessageA
PostMessageW
PostQuitMessage
PostThreadMessageA
PostThreadMessageW
RegisterClassA
RegisterClassW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropW
ScreenToClient
SendMessageA
SendMessageTimeoutA
SendMessageTimeoutW
SendMessageW
SetActiveWindow
SetCapture
SetClassLongW
SetClipboardData
SetCursor
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetPropA
SetRect
SetShellWindow
SetTimer
SetWindowLongA
SetWindowLongW
SetWindowPos
SetWindowTextA
SetWindowTextW
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateMessage
WindowFromPoint
wsprintfA
wsprintfW
GetMessagePos
GetMessageA
GetKeyboardType
GetKeyState
GetIconInfo
GetFocus
GetDlgItemTextW
GetDlgItem
GetCursorPos
GetCursor
GetClientRect
GetClassNameA
GetClassLongW
GetClassInfoW
GetCapture
FrameRect
FindWindowW
FindWindowExW
FillRect
ExitWindowsEx
EnumWindows
EndPaint
EndDialog
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextA
DrawIconEx
DrawFrameControl
DrawFocusRect
DispatchMessageW
DialogBoxParamW
DestroyWindow
DefWindowProcW
DefWindowProcA
CreateWindowExW
CreateWindowExA
CreateDialogParamW
CloseClipboard
CheckRadioButton
CheckDlgButton
CharUpperW
CharUpperBuffW
CharPrevW
CharNextW
CallWindowProcW
BringWindowToTop
BeginPaint
AttachThreadInput
AppendMenuW
AllowSetForegroundWindow
CharLowerW
IsCharLowerW
IsIconic
GetKeyboardLayout
GetParent
CloseDesktop
GetMenuContextHelpId
GetWindowDC
GetClipboardSequenceNumber
CharNextA
PaintDesktop
IsWindowVisible
CreatePopupMenu
GetAsyncKeyState
GetClipboardViewer
CreateMenu
EndMenu
GetDC
GetTopWindow
VkKeyScanW
GetClipboardOwner
IsCharUpperW
GetMessageExtraInfo
GetProcessWindowStation
EnableWindow

gdi32

GetTextExtentPointA
InvertRgn
PolyPatBlt
PolyPolyline
SelectObject
SetBkColor
SetBkMode
GetEnhMetaFilePaletteEntries
SetTextAlign
SetTextColor
SetTextJustification
SetViewportOrgEx
SetVirtualResolution
SetWinMetaFileBits
StretchDIBits
GetDeviceCaps
GetCharWidthFloatA
GetBkMode
GdiValidateHandle
GdiSetLastError
GdiPlayDCScript
EngStretchBltROP
GdiDeleteSpoolFileHandle
GdiCreateLocalMetaFilePict
SetDCPenColor
FillPath
EngBitBlt
EngAlphaBlend
DeleteObject
CreateFontIndirectW
CreateDIBSection
CreateBrushIndirect
ColorMatchToTarget
AddFontResourceTracking
CreateCompatibleDC
SwapBuffers
SaveDC
DeleteMetaFile
AbortDoc
GetDCBrushColor
DeleteEnhMetaFile
AddFontResourceA
UnrealizeObject
CreateSolidBrush
FONTOBJ_pfdg

advapi32

RegOpenKeyExW
RegEnumValueW
RegEnumKeyW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyW
RegSetValueExW

shell32

ShellExecuteW
SHPathPrepareForWriteW
SHPathPrepareForWriteA
SHInvokePrinterCommandW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetFileInfoW
SHGetFileInfo
SHFileOperationW
SHBrowseForFolderW
ExtractIconEx
ExtractIconA
ExtractAssociatedIconExA
DoEnvironmentSubstA

ole32

OleInitialize
CoTaskMemFree
CoCreateInstance
OleUninitialize

shlwapi

StrRChrW
StrRStrIW
StrCmpNIW

Sections

.text
Size: 313KB - Virtual size: 313KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 297KB - Virtual size: 297KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

04e223ad6e95a35241271104fc0972bb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

shlwapi

Sections

.text Size: 313KB - Virtual size: 313KB

.rdata Size: 297KB - Virtual size: 297KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 32KB - Virtual size: 31KB

.text
Size: 313KB - Virtual size: 313KB

.rdata
Size: 297KB - Virtual size: 297KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 32KB - Virtual size: 31KB