Static task
static1
Behavioral task
behavioral1
Sample
2024-12-21_2249a5da313044cccd423e1b716b0b58_cerber.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
2024-12-21_2249a5da313044cccd423e1b716b0b58_cerber.exe
Resource
win10v2004-20241007-en
General
-
Target
2024-12-21_2249a5da313044cccd423e1b716b0b58_cerber
-
Size
651KB
-
MD5
2249a5da313044cccd423e1b716b0b58
-
SHA1
0e6d626dd1edf0340e3afd9fcdbb52044d1fb0f3
-
SHA256
04bd22270af43b1e07cc737c523f493805082f280bc58f4ff3937a516c1fc5cf
-
SHA512
8824e0c9a4cb40f9f261d5960d43f0bec9294d89b94ab7856068ad3725e6b4c009fdc4338de21f83afe9a28bef702dd001a9c4117fbbbbdf2ae034d1740079bd
-
SSDEEP
12288:feySOCn73uSYcAEDCNBcXUME8oOoeMhqCk:dSOC7uSnAEDJX3EVu6Fk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-12-21_2249a5da313044cccd423e1b716b0b58_cerber
Files
-
2024-12-21_2249a5da313044cccd423e1b716b0b58_cerber.exe windows:5 windows x86 arch:x86
0bd92bf258d75638fce96489f3be733a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FormatMessageW
FlushFileBuffers
FindResourceW
FindResourceA
FindNextFileW
FindFirstFileW
FindClose
FillConsoleOutputCharacterA
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExitThread
ExitProcess
EnumSystemLocalesW
EnumCalendarInfoW
EnterCriticalSection
FreeEnvironmentStringsA
DnsHostnameToComputerNameW
DeleteFileW
DeleteFileA
DeleteCriticalSection
DefineDosDeviceW
CreateWaitableTimerW
CreateThread
CreateMailslotW
CreateFileW
CreateFileMappingA
CreateFileA
CreateEventW
CompareStringW
CommConfigDialogA
CloseHandle
FreeEnvironmentStringsW
FreeLibrary
FreeResource
GetACP
GetCPInfo
GetCPInfoExW
GetCommConfig
lstrlenW
lstrcpynW
lstrcpyn
lstrcmpiA
lstrcmpW
WritePrivateProfileStringW
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjectsEx
VirtualQueryEx
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
UnmapViewOfFile
UnhandledExceptionFilter
TlsSetValue
TlsGetValue
TerminateProcess
SwitchToThread
SuspendThread
Sleep
SizeofResource
SetUnhandledExceptionFilter
SetThreadPriority
SetThreadLocale
SetStdHandle
SetLastError
SetHandleCount
SetFilePointer
SetFileAttributesA
SetEvent
SetErrorMode
SetEndOfFile
SetConsoleTitleW
SetConsoleOutputCP
RtlZeroMemory
RtlUnwind
ResumeThread
ResetEvent
ReadFile
RaiseException
QueryPerformanceCounter
MultiByteToWideChar
MulDiv
MapViewOfFileEx
LockResource
LocalFree
LocalAlloc
LoadResource
LoadLibraryW
LoadLibraryExW
LoadLibraryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsValidLocale
InterlockedExchangeAdd
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
InitializeCriticalSection
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalUnlock
GlobalLock
GlobalFree
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVersionExW
GetVersionExA
GetVersion
GetUserDefaultUILanguage
GetTickCount
Beep
GetThreadPriority
GetThreadLocale
GetTempPathW
GetTempFileNameA
GetSystemTimeAsFileTime
GetSystemInfo
GetSystemDirectoryA
GetSystemDefaultUILanguage
GetStringTypeW
GetStringTypeExA
GetStringTypeA
GetStdHandle
GetStartupInfoA
GetShortPathNameW
GetProcessHeap
GetProcAddress
GetPrivateProfileStringW
GetOEMCP
GetNumberFormatW
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
GetLocaleInfoW
GetLocaleInfoA
GetLocalTime
GetLastError
GetFullPathNameW
GetFileType
GetFileSizeEx
GetFileAttributesW
GetFileAttributesA
GetExitCodeThread
GetEnvironmentStringsW
GetEnvironmentStrings
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetComputerNameA
GetCommandLineW
DosDateTimeToFileTime
GetCommandLineA
user32
ShowScrollBar
ShowWindow
SystemParametersInfoW
TabbedTextOutW
TileWindows
TrackPopupMenu
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnregisterClassW
UpdateWindow
WaitMessage
WindowFromPoint
GetMessageTime
IsCharLowerA
GetClipboardSequenceNumber
IsCharLowerW
InSendMessage
IsCharAlphaNumericA
IsGUIThread
GetMenuContextHelpId
GetClipboardViewer
LoadCursorFromFileW
PaintDesktop
SetClipboardViewer
SetClipboardData
SetClassLongW
SetCapture
SetActiveWindow
SendMessageW
SendMessageA
ScrollWindowEx
ScrollWindow
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PtInRect
PostQuitMessage
PostMessageW
PeekMessageW
PeekMessageA
OpenClipboard
OffsetRect
OemToCharBuffW
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MonitorFromWindow
MonitorFromPoint
MessageBoxW
MessageBoxA
MessageBeep
MapWindowPoints
MapVirtualKeyW
MapVirtualKeyA
LoadStringW
LoadKeyboardLayoutW
LoadImageW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageW
IsDialogMessageA
IsChild
IsCharAlphaW
IsCharAlphaNumericW
InvalidateRect
IntersectRect
ShowOwnedPopups
InsertMenuItemW
InflateRect
HideCaret
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowInfo
GetWindowDC
GetWindow
GetUpdateRect
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetMonitorInfoW
GetMessagePos
GetMessageExtraInfo
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgCtrlID
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetCapture
GetAsyncKeyState
GetActiveWindow
FrameRect
FindWindowW
FindWindowExW
FillRect
EnumWindows
EnumThreadWindows
EnumDisplayMonitors
EnumClipboardFormats
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextExW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DlgDirListComboBoxA
DispatchMessageW
DispatchMessageA
ShowCaret
SetWindowsHookExW
SetWindowTextW
SetWindowRgn
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropW
SetParent
SetMessageQueue
SetMenuItemInfoW
SetMenu
SetKeyboardState
SetForegroundWindow
SetFocus
SetDoubleClickTime
SetCursorPos
InsertMenuW
SetCursor
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeregisterShellHookWindow
DeleteMenu
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
DdeUnaccessData
DdeCreateDataHandle
CreateWindowExW
CreatePopupMenu
CreateMenu
CreateIconIndirect
CreateIcon
CountClipboardFormats
CopyImage
CloseClipboard
ClientToScreen
ChildWindowFromPoint
CheckMenuItem
CharUpperW
CharUpperBuffW
CharNextW
CharNextExA
CharLowerW
CharLowerBuffW
CallWindowProcW
CallNextHookEx
BeginPaint
AdjustWindowRectEx
ActivateKeyboardLayout
IsWindowUnicode
gdi32
AbortPath
AnimatePalette
Arc
ArcTo
BRUSHOBJ_pvAllocRbrush
BRUSHOBJ_ulGetBrushColor
BitBlt
Chord
CombineRgn
CopyEnhMetaFileW
CreateBitmap
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCW
CreateDIBSection
CreateDIBitmap
CreateFontIndirectA
CreateFontIndirectW
CreateHalftonePalette
CreateMetaFileW
CreatePalette
CreatePenIndirect
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteEnhMetaFile
DeleteObject
Ellipse
EnableEUDC
EndDoc
EngGetDriverName
EnumFontFamiliesExW
EqualRgn
ExcludeClipRect
ExtCreatePen
ExtCreateRegion
ExtFloodFill
ExtTextOutW
FrameRgn
GdiConvertFont
GdiCreateLocalMetaFilePict
GdiDescribePixelFormat
GdiEndPageEMF
GdiFlush
GdiGetCharDimensions
GetBitmapBits
GetBitmapDimensionEx
GetBrushOrgEx
GetClipBox
GetColorAdjustment
GetCurrentObject
GetCurrentPositionEx
GetDIBColorTable
GetDIBits
GetDeviceCaps
GetEnhMetaFileBits
GetEnhMetaFileDescriptionW
GetEnhMetaFileHeader
GetEnhMetaFilePaletteEntries
GetNearestPaletteIndex
GetObjectW
GetOutlineTextMetricsA
GetPaletteEntries
GetPixel
GetRgnBox
GetStockObject
GetSystemPaletteEntries
GetTextCharacterExtra
GetTextExtentPoint32W
GetTextMetricsW
GetWinMetaFileBits
GetWindowOrgEx
IntersectClipRect
LineTo
MaskBlt
MoveToEx
OffsetRgn
OffsetWindowOrgEx
PatBlt
Pie
PlayEnhMetaFile
PlgBlt
PolyBezier
PolyBezierTo
Polygon
Polyline
RealizePalette
RectVisible
Rectangle
ResizePalette
RestoreDC
RoundRect
SaveDC
ScaleViewportExtEx
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetBrushOrgEx
SetDIBColorTable
SetDIBits
SetDIBitsToDevice
SetEnhMetaFileBits
SetICMMode
SetPaletteEntries
SetPixel
SetPixelV
SetROP2
SetStretchBltMode
SetTextColor
SetTextJustification
SetViewportExtEx
SetViewportOrgEx
SetWinMetaFileBits
SetWindowOrgEx
StartFormPage
StretchBlt
StretchDIBits
TextOutA
UnrealizeObject
XLATEOBJ_iXlate
GetEnhMetaFileA
WidenPath
DeleteColorSpace
SetMetaRgn
EndPage
StrokePath
GdiGetBatchLimit
AbortDoc
GetROP2
AngleArc
advapi32
RegCloseKey
RegFlushKey
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyW
shell32
SHGetDataFromIDListA
Shell_NotifyIcon
DoEnvironmentSubstA
DragAcceptFiles
DragFinish
ExtractAssociatedIconA
ExtractIconExW
ExtractIconW
SHCreateDirectoryExA
SHCreateProcessAsUserW
WOWShellExecute
SHGetDiskFreeSpaceExW
SHGetInstanceExplorer
SHInvokePrinterCommandW
SHLoadNonloadedIconOverlayIdentifiers
SHPathPrepareForWriteA
SHQueryRecycleBinA
ShellAboutA
ShellExecuteExA
ShellExecuteW
shlwapi
StrChrIW
StrStrW
comctl32
FlatSB_GetScrollInfo
FlatSB_GetScrollPos
FlatSB_SetScrollInfo
FlatSB_SetScrollPos
FlatSB_SetScrollProp
ImageList_Add
ImageList_BeginDrag
ImageList_Copy
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_Draw
ImageList_DrawEx
ImageList_EndDrag
ImageList_GetBkColor
ImageList_GetDragImage
ImageList_GetIcon
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_Read
ImageList_Remove
ImageList_Replace
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_SetIconSize
ImageList_SetImageCount
ImageList_Write
ord17
InitializeFlatSB
_TrackMouseEvent
Sections
.text Size: 359KB - Virtual size: 358KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 235KB - Virtual size: 234KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ