Static task
static1
Behavioral task
behavioral1
Sample
2025-01-10_8a61458e6ac4304f8e1eb9af490f5eaf_cerber.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2025-01-10_8a61458e6ac4304f8e1eb9af490f5eaf_cerber.exe
Resource
win10v2004-20241007-en
General
-
Target
2025-01-10_8a61458e6ac4304f8e1eb9af490f5eaf_cerber
-
Size
660KB
-
MD5
8a61458e6ac4304f8e1eb9af490f5eaf
-
SHA1
32c87c24746d0ee330f7d25b55b96c808d25f5b4
-
SHA256
12bace7eccbe03cf3a70d9d5579b2cdde4161f3e15aaee58ec3f39acd708f697
-
SHA512
4c382442207aa7ce4a6045afcade58ee508563fe147f09a2d5c7443d6be4ccea67e2c05cbca59a7a135922b0ed5a272988eaec68634ab142188f290bfe4c9565
-
SSDEEP
12288:keySOCn73uSYcAEDCNBcXkME8ICoeMhqO1:eSOC7uSnAEDJXnE7K691
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2025-01-10_8a61458e6ac4304f8e1eb9af490f5eaf_cerber
Files
-
2025-01-10_8a61458e6ac4304f8e1eb9af490f5eaf_cerber.exe windows:5 windows x86 arch:x86
69371ad26122d75d90ec82be596b8a76
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEnvironmentVariableW
SetErrorMode
SetEvent
SetFileAttributesW
SetFilePointer
SetFileTime
SetHandleCount
SetLastError
SetNamedPipeHandleState
SetStdHandle
SetThreadExecutionState
SetThreadPriority
SetUnhandledExceptionFilter
SetVolumeMountPointA
SetWaitableTimer
SizeofResource
Sleep
SleepEx
SystemTimeToFileTime
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnlockFile
SetEnvironmentVariableA
UnmapViewOfFile
UnregisterWait
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualAllocEx
VirtualFree
VirtualFreeEx
VirtualQuery
VirtualQueryEx
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
WritePrivateProfileSectionW
WritePrivateProfileStructA
WritePrivateProfileStructW
WriteProcessMemory
lstrcatW
lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW
SetEndOfFile
SetDefaultCommConfigA
SetCurrentDirectoryW
SetConsoleCursorPosition
SearchPathW
RtlUnwind
ResumeThread
ResetEvent
RemoveVectoredExceptionHandler
RemoveDirectoryW
ReleaseSemaphore
ReleaseMutex
ReadProcessMemory
ReadFile
ReadConsoleOutputCharacterA
ReadConsoleA
RaiseException
QueueUserAPC
QueryPerformanceFrequency
QueryPerformanceCounter
QueryDosDeviceW
Process32NextW
Process32FirstW
Process32First
PostQueuedCompletionStatus
PeekNamedPipe
OutputDebugStringW
OutputDebugStringA
OpenProcess
OpenMutexW
OpenFileMappingW
OpenEventA
MultiByteToWideChar
MulDiv
MoveFileW
MoveFileExW
MapViewOfFile
LockResource
LockFileEx
LockFile
LocalFree
LocalFileTimeToFileTime
LocalAlloc
LoadResource
LoadLibraryW
LoadLibraryExW
LoadLibraryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsValidLocale
IsValidCodePage
IsProcessorFeaturePresent
IsDebuggerPresent
IsBadStringPtrA
IsBadReadPtr
InterlockedPushEntrySList
InterlockedPopEntrySList
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
InitializeSListHead
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
HeapValidate
HeapSize
HeapReAlloc
HeapLock
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalUnlock
GlobalSize
GlobalMemoryStatus
GlobalLock
GlobalFree
GlobalAlloc
GlobalAddAtomA
GetWindowsDirectoryW
GetWindowsDirectoryA
GetVolumeInformationW
GetVersionExW
GetVersionExA
GetVersion
GetUserDefaultLCID
GetTimeZoneInformation
GetTimeFormatW
GetTimeFormatA
GetTickCount
GetThreadPriority
GetTempPathW
GetTempPathA
GetTempFileNameW
GetTapeStatus
GetSystemTimeAsFileTime
GetSystemTime
GetSystemInfo
GetSystemDirectoryW
GetSystemDirectoryA
GetSystemDefaultUILanguage
GetStringTypeW
GetStringTypeExW
GetStringTypeA
GetStdHandle
GetStartupInfoA
GetQueuedCompletionStatus
GetProcessId
GetProcessHeap
GetProcAddress
GetPrivateProfileStringW
GetPrivateProfileSectionW
GetPrivateProfileSectionNamesW
GetPrivateProfileIntW
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
GetLongPathNameW
GetLogicalDrives
GetLogicalDriveStringsW
GetLocaleInfoW
GetLocaleInfoA
GetLocalTime
GetLastError
GetFullPathNameW
GetFullPathNameA
GetFileType
AddVectoredExceptionHandler
GetFileTime
GetFileSizeEx
GetFileSize
GetFileInformationByHandle
GetFileAttributesW
GetFileAttributesExW
GetFileAttributesA
GetExitCodeThread
GetExitCodeProcess
GetEnvironmentVariableW
GetEnvironmentStringsW
GetEnvironmentStrings
GetDriveTypeW
GetDriveTypeA
GetDiskFreeSpaceW
GetDiskFreeSpaceExW
GetDiskFreeSpaceA
GetDateFormatW
GetDateFormatA
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
GetCurrentDirectoryA
GetConsoleScreenBufferInfo
GetConsoleOutputCP
GetConsoleMode
GetConsoleCP
GetConsoleAliasExesA
GetComputerNameW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetACP
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FreeConsole
FormatMessageW
FormatMessageA
FlushInstructionCache
FlushFileBuffers
FlushConsoleInputBuffer
FindResourceW
FindNextFileW
FindFirstFileW
FindClose
FillConsoleOutputCharacterW
FileTimeToSystemTime
FileTimeToLocalFileTime
ExpandEnvironmentStringsW
ExpandEnvironmentStringsA
ExitThread
ExitProcess
EnumSystemLocalesA
EnterCriticalSection
EncodePointer
DuplicateHandle
DosDateTimeToFileTime
DeviceIoControl
DeleteFileW
DeleteFileA
DeleteCriticalSection
DecodePointer
CreateWaitableTimerA
CreateToolhelp32Snapshot
CreateThread
CreateSemaphoreW
CreateSemaphoreA
CreateProcessW
CreatePipe
CreateMutexW
CreateMutexA
CreateIoCompletionPort
CreateFileW
CreateFileMappingW
CreateFileMappingA
CreateFileA
CreateEventW
CreateEventA
CreateDirectoryW
CreateDirectoryA
CopyFileW
CopyFileA
ConnectNamedPipe
CompareStringW
CompareStringA
CompareFileTime
CloseHandle
AreFileApisANSI
UnlockFileEx
user32
InSendMessage
GetMessageExtraInfo
IsGUIThread
GetMenuContextHelpId
GetClipboardViewer
LoadCursorFromFileW
PaintDesktop
SystemParametersInfoW
SubtractRect
ShowWindow
ShowCursor
SetWindowsHookExW
SetWindowTextW
SetWindowRgn
SetWindowPos
SetWindowLongW
SetTimer
SetScrollInfo
SetRectEmpty
SetRect
SetParent
SetMessageExtraInfo
SetMenuItemInfoW
SetMenuItemBitmaps
SetMenuDefaultItem
SetMenu
SetForegroundWindow
SetFocus
SetCursorPos
SetCursor
SetClipboardViewer
SetClipboardData
SetClassWord
SetClassLongW
SetCapture
SetActiveWindow
SendMessageW
SendMessageCallbackA
ScrollWindow
ScreenToClient
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterHotKey
RegisterDeviceNotificationW
RegisterClipboardFormatW
RegisterClassW
RegisterClassExW
RedrawWindow
PtInRect
PostThreadMessageW
PostQuitMessage
PostMessageW
PeekMessageW
OpenWindowStationW
OpenInputDesktop
OpenClipboard
OffsetRect
MsgWaitForMultipleObjects
MoveWindow
MonitorFromWindow
MonitorFromRect
ModifyMenuW
MessageBoxW
MessageBoxA
MessageBeep
MapWindowPoints
MapVirtualKeyW
LoadMenuW
LoadImageW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDlgButtonChecked
IsDialogMessageW
IsClipboardFormatAvailable
IsCharAlphaNumericW
InvalidateRect
IntersectRect
InsertMenuW
InsertMenuItemW
InflateRect
IMPQueryIMEW
HideCaret
GetWindowThreadProcessId
GetWindowTextW
GetWindowTextLengthW
GetWindowRgn
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindow
GetUserObjectInformationW
GetUpdateRgn
GetTabbedTextExtentW
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetShellWindow
GetScrollPos
GetScrollInfo
GetQueueStatus
GetProcessWindowStation
GetClipboardSequenceNumber
GetPriorityClipboardFormat
GetParent
GetMonitorInfoW
GetMessageW
GetMessageTime
GetMessagePos
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenuDefaultItem
GetKeyboardLayoutNameA
GetKeyState
GetIconInfo
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItemInt
GetDlgItem
GetDialogBaseUnits
GetDesktopWindow
GetDC
GetCursorPos
GetClipboardFormatNameW
GetClipboardData
GetClientRect
GetClassNameW
GetCapture
GetAsyncKeyState
GetAncestor
GetActiveWindow
FlashWindow
FindWindowW
FindWindowExW
FillRect
ExitWindowsEx
EnumDisplaySettingsW
EnumChildWindows
EndPaint
EndDialog
EndDeferWindowPos
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextExW
DrawStateW
DrawStateA
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DialogBoxParamW
DialogBoxIndirectParamW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DestroyAcceleratorTable
DeferWindowPos
DefWindowProcW
DdeUninitialize
DdeQueryStringW
DdePostAdvise
DdeNameService
DdeInitializeW
DdeGetLastError
DdeGetData
DdeFreeStringHandle
DdeFreeDataHandle
DdeDisconnect
DdeCreateStringHandleW
DdeCreateDataHandle
DdeConnect
DdeClientTransaction
CreateWindowExW
CreatePopupMenu
CreateMenu
CreateIconIndirect
CreateDialogParamW
CreateDialogIndirectParamW
CreateCaret
CreateAcceleratorTableW
CopyRect
CopyAcceleratorTableW
CloseDesktop
CloseClipboard
ClientToScreen
ChildWindowFromPointEx
ChildWindowFromPoint
CheckMenuRadioItem
IsCharLowerA
GetThreadDesktop
GetKBCodePage
GetCaretBlinkTime
IsCharLowerW
IsCharAlphaNumericA
GetOpenClipboardWindow
CloseWindowStation
LoadIconA
wvsprintfW
wsprintfW
keybd_event
WindowFromPoint
WaitForInputIdle
VkKeyScanW
ValidateRgn
ValidateRect
UpdateWindow
UnregisterHotKey
UnregisterClassW
UnloadKeyboardLayout
UnionRect
UnhookWindowsHookEx
TranslateMessage
TranslateAcceleratorW
AdjustWindowRectEx
AppendMenuW
AttachThreadInput
BeginDeferWindowPos
BeginPaint
BlockInput
BringWindowToTop
CallMsgFilter
CallNextHookEx
CallWindowProcW
ChangeClipboardChain
ChangeDisplaySettingsW
CharLowerW
CharNextExA
CharNextW
CharToOemW
CharUpperW
CheckDlgButton
CheckMenuItem
TrackPopupMenu
ToAscii
GetProcessDefaultLayout
TabbedTextOutW
GetWindowDC
gdi32
GetDIBColorTable
GetDIBits
GetDeviceCaps
GetEnhMetaFileBits
GetEnhMetaFileHeader
GetEnhMetaFileW
GetGlyphIndicesW
GetGlyphOutlineWow
GetMapMode
GetNearestPaletteIndex
GetObjectA
GetObjectType
GetObjectW
GetOutlineTextMetricsW
GetPaletteEntries
GetPath
GetPixel
GetRegionData
GetRgnBox
GetStockObject
GetStretchBltMode
GetSystemPaletteEntries
GetTextColor
GetTextExtentExPointW
GetTextExtentExPointWPri
GetTextExtentPoint32W
GetTextMetricsW
GetWinMetaFileBits
GetWindowOrgEx
LineTo
MaskBlt
MirrorRgn
MoveToEx
OffsetRgn
PATHOBJ_vEnumStart
Pie
PlayEnhMetaFile
PlayMetaFile
PolyBezier
PolyPolygon
PolyPolyline
Polygon
Polyline
PolylineTo
GetCurrentObject
RealizePalette
RectInRegion
Rectangle
RoundRect
ScaleViewportExtEx
SelectClipRgn
SelectObject
SelectPalette
SetAbortProc
SetBkColor
SetBkMode
SetBrushOrgEx
SetDIBits
SetICMProfileW
SetMapMode
SetPixel
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
StartDocW
StartPage
StretchBlt
StretchDIBits
UpdateColors
GetEnhMetaFileA
CloseMetaFile
AbortPath
GetPolyFillMode
FlattenPath
UnrealizeObject
WidenPath
DeleteColorSpace
SetMetaRgn
StrokePath
GdiGetBatchLimit
AbortDoc
GetROP2
GetClipRgn
GetClipBox
GetCharWidthW
GetCharABCWidthsW
GetCharABCWidthsA
GetBkColor
GetBitmapBits
GdiSwapBuffers
GdiReleaseLocalDC
GdiQueryTable
GdiGetCodePage
GdiFlush
GdiEntry15
GdiCreateLocalMetaFilePict
GdiConvertFont
GdiComment
GdiAddGlsBounds
GdiAddFontResourceW
FrameRgn
FillRgn
ExtTextOutW
ExtSelectClipRgn
ExtFloodFill
ExtCreateRegion
ExtCreatePen
ExcludeClipRect
EudcLoadLinkW
EqualRgn
EnumFontsA
EnumFontFamiliesExW
EngMarkBandingSurface
EndPage
EndDoc
Ellipse
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgnIndirect
CreateRectRgn
CreatePolygonRgn
CreatePenIndirect
CreatePen
CreatePatternBrush
CreatePalette
CreateICW
CreateHatchBrush
CreateFontW
CreateFontIndirectW
CreateEnhMetaFileW
CreateDIBitmap
CreateDIBSection
CreateDCW
CreateDCA
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
CopyEnhMetaFileA
CombineRgn
ColorCorrectPalette
CloseEnhMetaFile
CancelDC
BitBlt
Arc
PtInRegion
AnimatePalette
advapi32
RegEnumKeyW
AddAccessAllowedAce
AdjustTokenPrivileges
AllocateAndInitializeSid
ConvertStringSecurityDescriptorToSecurityDescriptorW
CryptAcquireContextW
CryptCreateHash
CryptDestroyHash
CryptDestroyKey
CryptHashData
CryptImportKey
CryptReleaseContext
CryptVerifySignatureW
DeregisterEventSource
DuplicateToken
DuplicateTokenEx
FreeSid
GetLengthSid
GetTokenInformation
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
ReportEventA
RegisterEventSourceA
RegSetValueExW
RegQueryValueExW
RegQueryValueExA
RegQueryInfoKeyW
RegOpenKeyW
RegOpenKeyExW
RegOpenKeyExA
RegEnumValueW
AccessCheck
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyW
RegCreateKeyExW
RegCloseKey
OpenThreadToken
OpenProcessToken
LookupPrivilegeValueW
IsValidSecurityDescriptor
InitializeSecurityDescriptor
InitializeAcl
GetUserNameW
shell32
SHCreateDirectoryExW
ShellExecuteW
ShellExecuteExW
DragAcceptFiles
DragFinish
DragQueryFileA
DragQueryFileW
DragQueryPoint
ExtractIconExW
ExtractIconW
SHAppBarMessage
SHBrowseForFolderA
SHBrowseForFolderW
Shell_NotifyIconW
SHCreateProcessAsUserW
SHFreeNameMappings
SHGetDesktopFolder
SHGetDiskFreeSpaceExA
SHGetFileInfo
SHGetFileInfoW
SHGetFolderPathW
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ole32
RevokeDragDrop
StringFromGUID2
RegisterDragDrop
PropVariantClear
OleUninitialize
OleSetContainedObject
OleSetClipboard
OleRun
OleLockRunning
OleIsCurrentClipboard
OleInitialize
OleGetClipboard
OleFlushClipboard
CoUninitialize
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoRevokeClassObject
CoRegisterClassObject
CoLockObjectExternal
CoInitialize
CoFreeUnusedLibraries
CoCreateInstance
CoCreateFreeThreadedMarshaler
CLSIDFromString
ReleaseStgMedium
shlwapi
StrToIntW
StrRChrW
StrRStrIW
comctl32
ImageList_Add
ImageList_AddMasked
ImageList_BeginDrag
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_Draw
ImageList_EndDrag
ImageList_GetIcon
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_Remove
ImageList_Replace
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_SetDragCursorImage
Sections
.text Size: 359KB - Virtual size: 358KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 237KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ