Static task
static1
Behavioral task
behavioral1
Sample
2025-01-17_d6a19dae35457493ce54ffb82877417a_cerber.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2025-01-17_d6a19dae35457493ce54ffb82877417a_cerber.exe
Resource
win10v2004-20241007-en
General
-
Target
2025-01-17_d6a19dae35457493ce54ffb82877417a_cerber
-
Size
657KB
-
MD5
d6a19dae35457493ce54ffb82877417a
-
SHA1
5b70796b80827208db86dc09eb5394c4aa64e9bc
-
SHA256
aa249168bec90ed80c2633a89804c81b0e807cb9cd435630a11ee2908a78c062
-
SHA512
cfdc7bc1b113056ce3a5304682be33bc1d0f084faa6cd2b13b7dc04a73ef3c6bf97492f473e2c3a94e64e8bbc4d83b81cdfb62bf31c8d92efc527bba26e88632
-
SSDEEP
6144:uqKZl30feXONU/8uu4UqVta/CnXOxHQSwKihBFtHmZ3+kGEQNbrYKdX3XkeP3:FKYWnD1UqvFMHQviZ3kL/X3U6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2025-01-17_d6a19dae35457493ce54ffb82877417a_cerber
Files
-
2025-01-17_d6a19dae35457493ce54ffb82877417a_cerber.exe windows:5 windows x86 arch:x86
41aa8c845ca29dc4abb7b5b06a446d0c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultUILanguage
GetSystemDirectoryW
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW
GetTempFileNameW
GetTempPathW
GetThreadLocale
GetThreadTimes
GetTickCount
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultUILanguage
GetVersion
GetVersionExA
GetVersionExW
GetVolumeInformationW
GetWindowsDirectoryW
GlobalAddAtomW
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomW
GlobalFlags
GlobalFree
GlobalGetAtomNameW
GlobalHandle
GlobalLock
GlobalMemoryStatusEx
GlobalReAlloc
GlobalSize
GlobalUnlock
GlobalWire
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapQueryInformation
HeapReAlloc
HeapSetInformation
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedExchangeAdd
InterlockedIncrement
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LocalReAlloc
LockFile
LockResource
MoveFileW
MulDiv
MultiByteToWideChar
OpenProcess
OpenThread
GetStartupInfoA
OutputDebugStringW
ProcessIdToSessionId
QueryDosDeviceW
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseActCtx
ReleaseMutex
RemoveDirectoryW
ResetEvent
ResumeThread
RtlCaptureContext
RtlUnwind
SearchPathW
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFileApisToANSI
SetFileAttributesW
SetFilePointer
SetFileTime
SetHandleCount
SetLastError
SetProcessWorkingSetSize
SetStdHandle
SetThreadExecutionState
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
SleepEx
SystemTimeToFileTime
TerminateProcess
TerminateThread
Thread32First
Thread32Next
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TransactNamedPipe
TryEnterCriticalSection
UnhandledExceptionFilter
UnlockFile
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
WritePrivateProfileStringW
lstrcatW
lstrcmpA
lstrcmpW
lstrcmpiA
lstrcmpiW
lstrcpyA
lstrcpyW
lstrcpynA
lstrcpynW
lstrlenA
lstrlenW
GetShortPathNameW
GetProfileIntW
GetProcessHeap
GetPrivateProfileStringW
GetPrivateProfileIntW
GetOEMCP
GetNumberFormatW
GetModuleHandleW
GetModuleFileNameW
GetModuleFileNameA
GetLongPathNameW
GetLogicalDrives
GetLogicalDriveStringsW
GetLocaleInfoW
GetLocaleInfoA
GetLastError
GetFullPathNameW
GetFileType
GetFileTime
GetFileSizeEx
GetFileSize
GetFileAttributesW
GetFileAttributesExW
GetExitCodeProcess
GetEnvironmentStringsW
GetDriveTypeW
GetDriveTypeA
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
GetConsoleOutputCP
GetConsoleMode
GetConsoleCP
GetCommandLineW
GetAtomNameW
GetACP
FreeResource
FreeLibrary
FreeEnvironmentStringsW
FormatMessageW
FlushInstructionCache
FlushFileBuffers
FlsSetValue
FlsGetValue
FlsFree
FlsAlloc
FindResourceW
FindResourceExW
FindNextFileW
FindFirstFileW
FindClose
FindAtomW
FileTimeToSystemTime
FileTimeToLocalFileTime
ExpandEnvironmentStringsW
ExitThread
ExitProcess
EnterCriticalSection
EncodePointer
DuplicateHandle
DeviceIoControl
DeleteTimerQueueTimer
DeleteTimerQueueEx
DeleteFileW
DeleteCriticalSection
DeleteAtom
DefineDosDeviceW
DecodePointer
DebugBreak
DeactivateActCtx
CreateToolhelp32Snapshot
CreateTimerQueueTimer
CreateTimerQueue
CreateThread
CreateProcessW
CreateMutexW
CreateFileW
CreateEventW
GetModuleHandleA
CreateDirectoryW
CreateActCtxW
CopyFileW
CopyFileExW
ConvertDefaultLocale
CompareStringW
CompareFileTime
CloseHandle
AddAtomW
ActivateActCtx
LoadLibraryA
GetProcAddress
Sleep
GetCPInfo
CreateFileA
OutputDebugStringA
user32
GetWindowThreadProcessId
GrayStringW
HideCaret
InflateRect
InsertMenuItemW
InsertMenuW
IntersectRect
InvalidateRect
InvalidateRgn
InvertRect
IsChild
IsClipboardFormatAvailable
IsDialogMessageW
IsMenu
IsRectEmpty
IsWindow
IsWindowEnabled
IsZoomed
KillTimer
LoadAcceleratorsW
LoadBitmapW
LoadCursorW
LoadIconW
LoadImageW
LoadMenuW
LockWindowUpdate
MapDialogRect
MapVirtualKeyExW
MapVirtualKeyW
MapWindowPoints
MessageBeep
MessageBoxW
ModifyMenuW
MonitorFromPoint
MonitorFromWindow
MoveWindow
NotifyWinEvent
OffsetRect
OpenClipboard
PeekMessageW
PostMessageW
PostQuitMessage
PostThreadMessageW
PtInRect
RealChildWindowFromPoint
RedrawWindow
RegisterClassW
RegisterClipboardFormatW
RegisterWindowMessageW
ReleaseDC
RemoveMenu
RemovePropW
ReuseDDElParam
ScreenToClient
ScrollWindow
SendDlgItemMessageA
SendDlgItemMessageW
SendMessageW
SetActiveWindow
SetCapture
SetClassLongW
SetClipboardData
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetLayeredWindowAttributes
SetMenu
SetMenuDefaultItem
SetMenuItemBitmaps
SetParent
SetPropW
SetRect
SetRectEmpty
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowContextHelpId
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextW
SetWindowsHookExW
ShowOwnedPopups
ShowScrollBar
ShowWindow
SubtractRect
SystemParametersInfoW
TabbedTextOutW
ToUnicodeEx
TrackPopupMenu
TranslateAcceleratorW
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnionRect
UnpackDDElParam
UnregisterClassW
UpdateLayeredWindow
GetWindowTextW
ValidateRect
WaitMessage
WinHelpW
WindowFromPoint
wsprintfW
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextExW
DrawStateW
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DestroyMenu
DestroyAcceleratorTable
DeleteMenu
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreateWindowExW
CreateIconIndirect
CreateDialogIndirectParamW
CreateAcceleratorTableW
CopyRect
CopyImage
CopyAcceleratorTableW
ClientToScreen
CheckMenuItem
CheckDlgButton
CharUpperBuffW
CharNextW
CallWindowProcW
CallNextHookEx
BringWindowToTop
BeginPaint
BeginDeferWindowPos
AppendMenuW
AdjustWindowRectEx
GetClipboardData
LoadCursorFromFileW
DestroyWindow
GetCaretBlinkTime
GetDlgCtrlID
VkKeyScanA
CharUpperW
GetDesktopWindow
GetListBoxInfo
IsGUIThread
CountClipboardFormats
GetQueueStatus
GetMessagePos
DrawMenuBar
GetWindowTextLengthW
GetShellWindow
CharLowerA
GetSystemMetrics
DestroyIcon
OpenIcon
GetSysColor
AnyPopup
CopyIcon
GetKeyState
GetActiveWindow
InSendMessage
ReleaseCapture
CloseClipboard
GetMessageTime
GetWindowContextHelpId
EnumClipboardFormats
GetKeyboardType
GetOpenClipboardWindow
DestroyCursor
GetInputState
WindowFromDC
CharLowerW
IsCharLowerW
IsIconic
GetKeyboardLayout
GetParent
CloseDesktop
GetMenuContextHelpId
GetWindowDC
GetClipboardSequenceNumber
CharNextA
PaintDesktop
IsWindowVisible
CreatePopupMenu
GetAsyncKeyState
GetClipboardViewer
CreateMenu
EndMenu
GetDC
GetTopWindow
VkKeyScanW
GetClipboardOwner
GetWindowRgn
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindow
GetUpdateRect
GetSystemMenu
GetSysColorBrush
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetNextDlgTabItem
GetNextDlgGroupItem
GetMonitorInfoW
GetMessageW
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenuDefaultItem
GetMenuCheckMarkDimensions
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItem
GetCursorPos
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCapture
FrameRect
FillRect
EqualRect
EnumDisplaySettingsW
EnumDisplayMonitors
EnumDisplayDevicesW
EndPaint
EndDialog
UpdateWindow
EndDeferWindowPos
GetProcessWindowStation
GetMessageExtraInfo
IsCharUpperW
DeferWindowPos
gdi32
CreateMetaFileA
GdiGetBatchLimit
GetLayout
GetTextColor
CreateHalftonePalette
GetBkMode
CancelDC
EndDoc
GetTextCharacterExtra
CombineTransform
CreateDIBPatternBrushPt
CreatePolygonRgn
EngDeletePalette
EngFreeModule
EngGetCurrentCodePage
EngGradientFill
EngStrokeAndFillPath
ExcludeClipRect
GdiCreateLocalEnhMetaFile
GdiEndPageEMF
GdiEntry11
GdiEntry15
GdiGetLocalFont
GetBkColor
GetBoundsRect
GetCharWidthW
GetClipRgn
GetEnhMetaFileBits
GetEnhMetaFileDescriptionA
GetGlyphIndicesA
GetGraphicsMode
GetICMProfileA
GetMapMode
GetPixel
GetTextCharsetInfo
GetTextFaceAliasW
GetTextMetricsA
HT_Get8BPPMaskPalette
ScaleViewportExtEx
SelectClipRgn
SetBkColor
SetLayout
SetMetaFileBitsEx
SetPaletteEntries
TextOutA
bInitSystemAndFontsDirectoriesW
DeleteObject
SetMetaRgn
GetStockObject
GetPixelFormat
DeleteDC
GetSystemPaletteUse
GetEnhMetaFileA
CloseEnhMetaFile
RealizePalette
AbortPath
BeginPath
CloseMetaFile
CreateCompatibleDC
SwapBuffers
SaveDC
DeleteMetaFile
AbortDoc
GetDCBrushColor
DeleteEnhMetaFile
AddFontResourceA
UnrealizeObject
CreateSolidBrush
GetAspectRatioFilterEx
FillPath
comdlg32
GetFileTitleW
advapi32
RegSetValueExW
RegQueryValueW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumValueW
RegEnumKeyW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
QueryServiceStatusEx
OpenServiceW
OpenSCManagerW
GetUserNameA
EnumDependentServicesW
ControlService
CloseServiceHandle
RegOpenKeyW
RegQueryValueExW
StartServiceW
shell32
SHAppBarMessage
ShellExecuteExA
ShellAboutA
SHPathPrepareForWriteA
SHParseDisplayName
SHIsFileAvailableOffline
SHInvokePrinterCommandA
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
SHGetFileInfoW
SHGetFileInfoA
SHGetDiskFreeSpaceExW
SHGetDiskFreeSpaceExA
DoEnvironmentSubstA
DoEnvironmentSubstW
DragFinish
DragQueryFileA
DragQueryFileW
DragQueryPoint
ExtractAssociatedIconA
ExtractIconA
ExtractIconExW
ShellExecuteW
SHBindToParent
SHBrowseForFolderW
SHChangeNotify
SHCreateDirectoryExW
SHCreateProcessAsUserW
SHFileOperation
SHFileOperationA
SHFileOperationW
SHGetDataFromIDListW
SHGetDesktopFolder
shlwapi
AssocQueryStringW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW
PathRemoveFileSpecW
PathStripToRootW
PathUnExpandEnvStringsW
SHDeleteKeyW
StrChrIA
StrChrIW
StrCmpNA
StrRStrIA
StrRetToStrW
StrStrW
imm32
ImmGetContext
ImmGetOpenStatus
ImmReleaseContext
Sections
.text Size: 403KB - Virtual size: 402KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 183KB - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ