Static task
static1
Behavioral task
behavioral1
Sample
2024-12-21_3208682f618bc06e1e677967db31ff1c_cerber.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
2024-12-21_3208682f618bc06e1e677967db31ff1c_cerber.exe
Resource
win10v2004-20241007-en
General
-
Target
2024-12-21_3208682f618bc06e1e677967db31ff1c_cerber
-
Size
224KB
-
MD5
3208682f618bc06e1e677967db31ff1c
-
SHA1
14e7b657f36601ac4200d7e9e7626418f3574974
-
SHA256
065063a2087ffa310492789dbd52047f94c5beadc0d0c6995130c8d274d44c97
-
SHA512
fa79a71e0df63a23723e5923a6a61f6a047ff0cd04a2bb32613c6e63ae47f0e88d66183c8b9fa45fda9d1ee09dc566637f0ee5da69474062a88fe885ac7c9d1a
-
SSDEEP
6144:I28M/PKlNTzQ2Vo2F4FaxwfWHlykdoXtDN3FpZNXblFjw:d8M/PcZsmFaFaxMIdo4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-12-21_3208682f618bc06e1e677967db31ff1c_cerber
Files
-
2024-12-21_3208682f618bc06e1e677967db31ff1c_cerber.exe windows:5 windows x86 arch:x86
fbf1450cd69d813b4d3f3c7090e57775
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetCurrentProcess
FreeLibrary
CreateFileW
CloseHandle
GetModuleHandleA
LoadLibraryW
user32
LoadIconW
GetKeyState
IsWindow
gdi32
AddFontResourceA
GdiFlush
AddFontResourceW
SelectObject
AbortPath
AbortDoc
SetTextAlign
CreateCompatibleDC
SetTextColor
advapi32
RegOpenKeyW
RegQueryValueExW
winmm
timeGetTime
Sections
.text Size: 197KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 704B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ