2025-02-05_797eb1f04d23cace6ded3673360047b3_cerber

Sharing

Copy URL

Twitter E-mail

General

Target

2025-02-05_797eb1f04d23cace6ded3673360047b3_cerber
Size

1.0MB
MD5

797eb1f04d23cace6ded3673360047b3
SHA1

0db8496e5c60c924459f0eaa62111b54cc579a10
SHA256

a773007ae906a6987b1d332509355032310920e7500e2e4d47569538f9726fa6
SHA512

1ed7852c84a5463912580625c785e9b63d4fb0a6fd7feb3868212fb257b9bfaedf7ef8bde2b8bf48d82fc13c971c0c1d86a4d4f68c7b88ceb656ed37b5f5a066
SSDEEP

6144:7GfPAkoTeqiqBXRB3mFXHAQxZICp9YkluEJ3nmnCy5x/c3m1AyDeZx+bG1N3:C388qBXiXH7Ie9XluENLyvcWKZx+Qx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-02-05_797eb1f04d23cace6ded3673360047b3_cerber

Files

2025-02-05_797eb1f04d23cace6ded3673360047b3_cerber
.exe windows:5 windows x86 arch:x86

ef3996afc957740e5cdbac4151964b88

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileStringA
GetPrivateProfileStringW
GetShortPathNameW
GetStartupInfoA
GetStdHandle
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemTime
GetSystemTimeAsFileTime
GetTempFileNameW
GetTempPathW
GetThreadSelectorEntry
GetTickCount
GetTimeFormatW
GetVersion
GetVersionExW
GetWindowsDirectoryW
GlobalAlloc
GlobalFree
GlobalGetAtomNameA
GlobalLock
GlobalUnlock
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsBadHugeReadPtr
IsValidCodePage
LCMapStringW
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalAlloc
LocalFree
Module32FirstW
MoveFileW
MulDiv
MultiByteToWideChar
GetModuleHandleW
QueueUserAPC
ReadFile
RemoveDirectoryA
RemoveDirectoryW
SearchPathW
SetCurrentDirectoryW
SetDefaultCommConfigW
SetErrorMode
SetFileAttributesA
SetFileAttributesW
SetFilePointer
SetFileTime
SetLastError
SetStdHandle
SystemTimeToFileTime
Thread32Next
TransactNamedPipe
TryEnterCriticalSection
VerifyVersionInfoW
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile
WritePrivateProfileStringW
_lcreat
_lread
lstrcatA
lstrcatW
lstrcmpW
lstrcmpiA
lstrcmpiW
lstrcpyA
lstrcpyW
lstrcpynA
lstrcpynW
lstrlenA
lstrlenW
GetModuleFileNameW
GetLocalTime
GetLastError
GetFullPathNameW
GetFileType
GetFileTime
GetFileSize
GetFileAttributesW
GetExitCodeProcess
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
GetComputerNameW
GetComputerNameExW
GetComputerNameExA
GetCommandLineW
GetCommModemStatus
FreeLibrary
FormatMessageW
FormatMessageA
FindResourceW
FindNextFileW
FindNextFileA
FindFirstFileW
FindFirstFileExA
FindFirstFileA
FindClose
FillConsoleOutputCharacterW
FileTimeToSystemTime
ExpandEnvironmentStringsW
ExitThread
ExitProcess
EnumSystemLocalesA
DisableThreadLibraryCalls
DeleteTimerQueue
DeleteFileW
DeleteFileA
CreateThread
CreateProcessW
CreateProcessA
CreateFileW
CreateEventA
CreateDirectoryW
CreateDirectoryExW
CopyFileW
CompareFileTime
CloseHandle
ClearCommError
LoadLibraryA
GetProcAddress
Sleep
GetCPInfo
CreateFileA
OpenProcess
GetModuleHandleA

user32

GetMessageW
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetWindow
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowThreadProcessId
InflateRect
InvalidateRect
IsDialogMessageW
IsWindow
IsWindowEnabled
IsWindowUnicode
KillTimer
LoadBitmapW
LoadCursorW
LoadImageA
LoadImageW
LoadStringW
MessageBeep
MessageBoxA
MessageBoxIndirectW
MessageBoxW
OffsetRect
OpenClipboard
PeekMessageA
PeekMessageW
PostMessageA
PostMessageW
PostQuitMessage
PostThreadMessageA
PostThreadMessageW
RegisterClassA
RegisterClassW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropW
ScreenToClient
SendMessageA
SendMessageTimeoutA
SendMessageTimeoutW
SendMessageW
SetActiveWindow
SetCapture
SetClassLongW
SetClipboardData
SetCursor
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetPropA
SetRect
SetShellWindow
SetTimer
SetWindowLongA
SetWindowLongW
SetWindowPos
SetWindowTextA
SetWindowTextW
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateMessage
WindowFromPoint
wsprintfA
wsprintfW
GetMessagePos
GetMessageA
GetKeyboardType
GetKeyState
GetIconInfo
GetFocus
GetDlgItemTextW
GetDlgItem
GetCursorPos
GetCursor
GetClientRect
GetClassNameA
GetClassLongW
GetClassInfoW
GetCapture
FrameRect
FindWindowW
FindWindowExW
FillRect
ExitWindowsEx
EnumWindows
EndPaint
EndDialog
EnableWindow
EnableMenuItem
EmptyClipboard
DrawTextW
DrawIconEx
DrawFrameControl
DrawFocusRect
DispatchMessageW
DialogBoxParamW
DestroyWindow
DefWindowProcW
DefWindowProcA
CreateWindowExW
CreateWindowExA
CreateDialogParamW
CloseClipboard
CheckRadioButton
CheckDlgButton
CharUpperW
CharUpperBuffW
CharPrevW
CharNextW
CallWindowProcW
BringWindowToTop
BeginPaint
AttachThreadInput
AppendMenuW
AllowSetForegroundWindow
CharLowerW
IsCharLowerW
IsIconic
GetKeyboardLayout
GetParent
CloseDesktop
GetMenuContextHelpId
GetWindowDC
GetClipboardSequenceNumber
CharNextA
PaintDesktop
IsWindowVisible
CreatePopupMenu
GetAsyncKeyState
GetClipboardViewer
CreateMenu
EndMenu
GetDC
GetTopWindow
VkKeyScanW
GetClipboardOwner
IsCharUpperW
GetMessageExtraInfo
GetProcessWindowStation
DrawTextA

gdi32

GetTextExtentPointA
InvertRgn
PolyPatBlt
PolyPolyline
SelectObject
SetBkColor
SetBkMode
GetEnhMetaFilePaletteEntries
SetTextAlign
SetTextColor
SetTextJustification
SetViewportOrgEx
SetVirtualResolution
SetWinMetaFileBits
StretchDIBits
GetDeviceCaps
GetCharWidthFloatA
EngStretchBltROP
GetBkMode
GdiValidateHandle
GdiSetLastError
GdiPlayDCScript
GdiDeleteSpoolFileHandle
GdiCreateLocalMetaFilePict
SetDCPenColor
FillPath
EngBitBlt
EngAlphaBlend
DeleteObject
CreateFontIndirectW
CreateDIBSection
CreateBrushIndirect
ColorMatchToTarget
AddFontResourceTracking
CreateCompatibleDC
SwapBuffers
SaveDC
DeleteMetaFile
AbortDoc
GetDCBrushColor
DeleteEnhMetaFile
AddFontResourceA
UnrealizeObject
CreateSolidBrush
FONTOBJ_pfdg

advapi32

RegOpenKeyExW
RegEnumValueW
RegEnumKeyW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegOpenKeyW
RegQueryValueExW
RegSetValueExW

shell32

ShellExecuteW
SHPathPrepareForWriteW
SHPathPrepareForWriteA
SHInvokePrinterCommandW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetFileInfoW
SHGetFileInfo
SHFileOperationW
SHBrowseForFolderW
ExtractIconEx
ExtractIconA
ExtractAssociatedIconExA
DoEnvironmentSubstA

ole32

OleInitialize
CoTaskMemFree
CoCreateInstance
OleUninitialize

shlwapi

StrRChrW
StrRStrIW
StrCmpNIW

Sections

.text
Size: 695KB - Virtual size: 694KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 297KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ef3996afc957740e5cdbac4151964b88

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

shlwapi

Sections

.text Size: 695KB - Virtual size: 694KB

.rdata Size: 297KB - Virtual size: 296KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 50KB - Virtual size: 49KB

.text
Size: 695KB - Virtual size: 694KB

.rdata
Size: 297KB - Virtual size: 296KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 50KB - Virtual size: 49KB