2025-01-10_a42a32aec6f5dcd3677b268cc44a6304_cerber

Sharing

Copy URL

Twitter E-mail

General

Target

2025-01-10_a42a32aec6f5dcd3677b268cc44a6304_cerber
Size

753KB
MD5

a42a32aec6f5dcd3677b268cc44a6304
SHA1

946b9a95f98d25a93d6a507a742b8a64433059ea
SHA256

1106d07308c8c6c879b45f610a6ef9e2cbb22bdd43fa034b2600e52e46bed524
SHA512

43e49600b06a2d5910b6fc85ca5c4f54efdaba9d7bdba03e7144cb78a4dc0765f1096fa73f44660e9d5a7e26eb4c6c20d302316de9d76a22dfe6b6ffc9b4890d
SSDEEP

6144:OOkZeCLQIqSY9lHir4mwA2MhhIsXt2xirQg:FyxiCHrFhIKtfQg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-01-10_a42a32aec6f5dcd3677b268cc44a6304_cerber

Files

2025-01-10_a42a32aec6f5dcd3677b268cc44a6304_cerber
.exe windows:5 windows x86 arch:x86

8e53926ba805899f969e02950974b007

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileStringA
GetPrivateProfileStringW
GetShortPathNameW
GetStartupInfoA
GetStdHandle
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemTime
GetSystemTimeAsFileTime
GetTempFileNameW
GetTempPathW
GetThreadSelectorEntry
GetTickCount
GetTimeFormatW
GetVersion
GetVersionExW
GetWindowsDirectoryW
GlobalAlloc
GlobalFree
GlobalGetAtomNameA
GlobalLock
GlobalUnlock
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsBadHugeReadPtr
IsValidCodePage
LCMapStringW
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalAlloc
LocalFree
Module32FirstW
MoveFileW
MulDiv
MultiByteToWideChar
GetModuleHandleW
QueueUserAPC
ReadFile
RemoveDirectoryA
RemoveDirectoryW
SearchPathW
SetCurrentDirectoryW
SetDefaultCommConfigW
SetErrorMode
SetFileAttributesA
SetFileAttributesW
SetFilePointer
SetFileTime
SetLastError
SetStdHandle
SystemTimeToFileTime
Thread32Next
TransactNamedPipe
TryEnterCriticalSection
VerifyVersionInfoW
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile
WritePrivateProfileStringW
_lcreat
_lread
lstrcatA
lstrcatW
lstrcmpW
lstrcmpiA
lstrcmpiW
lstrcpyA
lstrcpyW
lstrcpynA
lstrcpynW
lstrlenA
lstrlenW
GetModuleFileNameW
GetLocalTime
GetLastError
GetFullPathNameW
GetFileType
GetFileTime
GetFileSize
GetFileAttributesW
GetExitCodeProcess
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
GetComputerNameW
GetComputerNameExW
GetComputerNameExA
GetCommandLineW
GetCommModemStatus
FreeLibrary
FormatMessageW
FormatMessageA
FindResourceW
FindNextFileW
FindNextFileA
FindFirstFileW
FindFirstFileExA
FindFirstFileA
FindClose
FillConsoleOutputCharacterW
FileTimeToSystemTime
ExpandEnvironmentStringsW
ExitThread
ExitProcess
EnumSystemLocalesA
DisableThreadLibraryCalls
DeleteTimerQueue
DeleteFileW
DeleteFileA
CreateThread
CreateProcessW
CreateProcessA
CreateFileW
CreateEventA
CreateDirectoryW
CreateDirectoryExW
CopyFileW
CompareFileTime
CloseHandle
ClearCommError
LoadLibraryA
GetProcAddress
GetModuleHandleA
Sleep
GetCPInfo
OpenProcess
CreateFileA

user32

GetMessageW
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetWindow
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowThreadProcessId
InflateRect
InvalidateRect
IsDialogMessageW
IsWindow
IsWindowEnabled
IsWindowUnicode
KillTimer
LoadBitmapW
LoadCursorW
LoadImageA
LoadImageW
LoadStringW
MessageBeep
MessageBoxA
MessageBoxIndirectW
MessageBoxW
OffsetRect
OpenClipboard
PeekMessageA
PeekMessageW
PostMessageA
PostMessageW
PostQuitMessage
PostThreadMessageA
PostThreadMessageW
RegisterClassA
RegisterClassW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropW
ScreenToClient
SendMessageA
SendMessageTimeoutA
SendMessageTimeoutW
SendMessageW
SetActiveWindow
SetCapture
SetClassLongW
SetClipboardData
SetCursor
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetPropA
SetRect
SetShellWindow
SetTimer
SetWindowLongA
SetWindowLongW
SetWindowPos
SetWindowTextA
SetWindowTextW
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateMessage
WindowFromPoint
wsprintfA
wsprintfW
GetMessagePos
GetMessageA
GetKeyboardType
GetKeyState
GetIconInfo
GetFocus
GetDlgItemTextW
GetDlgItem
GetCursorPos
GetCursor
GetClientRect
GetClassNameA
GetClassLongW
GetClassInfoW
GetCapture
FrameRect
FindWindowW
FindWindowExW
FillRect
ExitWindowsEx
EnumWindows
EndPaint
EndDialog
EnableWindow
EnableMenuItem
EmptyClipboard
DrawTextW
DrawIconEx
DrawFrameControl
DrawFocusRect
DispatchMessageW
DialogBoxParamW
DestroyWindow
DefWindowProcW
DefWindowProcA
CreateWindowExW
CreateWindowExA
CreateDialogParamW
CloseClipboard
CheckRadioButton
CheckDlgButton
CharUpperW
CharUpperBuffW
CharPrevW
CharNextW
CallWindowProcW
BringWindowToTop
BeginPaint
AttachThreadInput
AppendMenuW
AllowSetForegroundWindow
CharLowerW
IsCharLowerW
IsIconic
GetKeyboardLayout
GetParent
CloseDesktop
GetMenuContextHelpId
GetWindowDC
GetClipboardSequenceNumber
CharNextA
PaintDesktop
IsWindowVisible
CreatePopupMenu
GetAsyncKeyState
GetClipboardViewer
CreateMenu
EndMenu
GetDC
GetTopWindow
VkKeyScanW
GetClipboardOwner
IsCharUpperW
GetMessageExtraInfo
GetProcessWindowStation
DrawTextA

gdi32

GetTextExtentPointA
InvertRgn
PolyPatBlt
PolyPolyline
SelectObject
SetBkColor
SetBkMode
GetEnhMetaFilePaletteEntries
SetTextAlign
SetTextColor
SetTextJustification
SetViewportOrgEx
SetVirtualResolution
SetWinMetaFileBits
StretchDIBits
GetDeviceCaps
GetCharWidthFloatA
EngStretchBltROP
GetBkMode
GdiValidateHandle
GdiSetLastError
GdiPlayDCScript
GdiDeleteSpoolFileHandle
GdiCreateLocalMetaFilePict
SetDCPenColor
FillPath
EngBitBlt
EngAlphaBlend
DeleteObject
CreateFontIndirectW
CreateDIBSection
CreateBrushIndirect
ColorMatchToTarget
AddFontResourceTracking
CreateCompatibleDC
SwapBuffers
SaveDC
DeleteMetaFile
AbortDoc
GetDCBrushColor
DeleteEnhMetaFile
AddFontResourceA
UnrealizeObject
CreateSolidBrush
FONTOBJ_pfdg

advapi32

RegOpenKeyExW
RegEnumValueW
RegEnumKeyW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyW
RegSetValueExW

shell32

ShellExecuteW
SHPathPrepareForWriteW
SHPathPrepareForWriteA
SHInvokePrinterCommandW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetFileInfoW
SHGetFileInfo
SHFileOperationW
SHBrowseForFolderW
ExtractIconEx
ExtractIconA
ExtractAssociatedIconExA
DoEnvironmentSubstA

ole32

OleInitialize
CoTaskMemFree
CoCreateInstance
OleUninitialize

shlwapi

StrRChrW
StrRStrIW
StrCmpNIW

Sections

.text
Size: 411KB - Virtual size: 411KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 298KB - Virtual size: 297KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8e53926ba805899f969e02950974b007

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

shlwapi

Sections

.text Size: 411KB - Virtual size: 411KB

.rdata Size: 298KB - Virtual size: 297KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 32KB - Virtual size: 31KB

.text
Size: 411KB - Virtual size: 411KB

.rdata
Size: 298KB - Virtual size: 297KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 32KB - Virtual size: 31KB