2025-02-21_d78300d916538cc92bf9f00c412fb39d_cerber

Sharing

Copy URL

Twitter E-mail

General

Target

2025-02-21_d78300d916538cc92bf9f00c412fb39d_cerber
Size

1.0MB
MD5

d78300d916538cc92bf9f00c412fb39d
SHA1

d9d337b7449812cd43c070dd66884fcfff5456ee
SHA256

25ccbbbe79340bac2f64421821c73db59d25cedff6503e075af80cb3e621b983
SHA512

558d95a9613136444c98ac43a661a89dfa87879756b8b6b87b98110f848ce94451f2ac09cc7971182e110ff9ed9e6e12f5d09f4be7ca327490f19402c2fb62cc
SSDEEP

6144:5rfPAkoTeqiqBXRB3mFXHAQxZICp9YkluEJ3nmnCy5x/c3m1AqzdAZx+bG1NN:J388qBXiXH7Ie9XluENLyvcWbzyZx+Qf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-02-21_d78300d916538cc92bf9f00c412fb39d_cerber

Files

2025-02-21_d78300d916538cc92bf9f00c412fb39d_cerber
.exe windows:5 windows x86 arch:x86

2a11b10fafda8a1ddbaff55a3ebe4a58

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStringsW
GetExitCodeProcess
GetFileAttributesW
GetFileSize
GetFileTime
GetFileType
GetFullPathNameW
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetPrivateProfileIntW
GetPrivateProfileStringA
GetPrivateProfileStringW
GetProcessHeap
GetShortPathNameW
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemTime
GetSystemTimeAsFileTime
GetTempFileNameW
GetTempPathW
GetThreadSelectorEntry
GetTickCount
GetTimeFormatW
GetVersion
GetVersionExW
GetWindowsDirectoryW
GlobalAlloc
GlobalFree
GlobalGetAtomNameA
GlobalLock
GlobalUnlock
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsBadHugeReadPtr
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
GetDiskFreeSpaceW
LocalAlloc
LocalFree
Module32FirstW
MoveFileW
MulDiv
MultiByteToWideChar
OpenProcess
OutputDebugStringW
QueryPerformanceCounter
QueueUserAPC
ReadFile
RemoveDirectoryA
RemoveDirectoryW
RtlUnwind
SearchPathW
SetCurrentDirectoryW
SetDefaultCommConfigW
SetErrorMode
SetFileAttributesA
SetFileAttributesW
SetFilePointer
SetFilePointerEx
SetFileTime
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SystemTimeToFileTime
TerminateProcess
Thread32Next
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TransactNamedPipe
TryEnterCriticalSection
UnhandledExceptionFilter
VerifyVersionInfoW
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile
WritePrivateProfileStringW
_lcreat
_lread
lstrcatA
lstrcatW
lstrcmpW
lstrcmpiA
lstrcmpiW
lstrcpyA
lstrcpyW
lstrcpynA
lstrcpynW
lstrlenA
lstrlenW
GetDateFormatW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
GetConsoleMode
GetConsoleCP
GetComputerNameW
GetComputerNameExW
GetComputerNameExA
GetCommandLineW
GetCommModemStatus
GetACP
FreeLibrary
FreeEnvironmentStringsW
FormatMessageW
FormatMessageA
FlushFileBuffers
FindResourceW
FindNextFileW
FindNextFileA
FindFirstFileW
FindFirstFileExA
FindFirstFileA
FindClose
FillConsoleOutputCharacterW
FileTimeToSystemTime
ExpandEnvironmentStringsW
ExitThread
ExitProcess
EnumSystemLocalesA
EnterCriticalSection
EncodePointer
DisableThreadLibraryCalls
DeleteTimerQueue
DeleteFileW
DeleteFileA
DeleteCriticalSection
DecodePointer
CreateThread
CreateProcessW
CreateProcessA
CreateFileW
CreateEventA
CreateDirectoryW
CreateDirectoryExW
CopyFileW
CompareFileTime
CloseHandle
ClearCommError
Sleep
GetCPInfo
CreateFileA
LoadLibraryA
GetProcAddress
LoadLibraryW
GetModuleHandleA

user32

GetMessageW
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetWindow
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowThreadProcessId
InflateRect
InvalidateRect
IsDialogMessageW
IsWindow
IsWindowEnabled
IsWindowUnicode
KillTimer
LoadBitmapW
LoadCursorW
LoadImageA
LoadImageW
LoadStringW
MessageBeep
MessageBoxA
MessageBoxIndirectW
MessageBoxW
OffsetRect
OpenClipboard
PeekMessageA
PeekMessageW
PostMessageA
PostMessageW
PostQuitMessage
PostThreadMessageA
PostThreadMessageW
RegisterClassA
RegisterClassW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropW
ScreenToClient
SendMessageA
SendMessageTimeoutA
SendMessageTimeoutW
SendMessageW
SetActiveWindow
SetCapture
SetClassLongW
SetClipboardData
SetCursor
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetPropA
SetRect
SetShellWindow
SetTimer
SetWindowLongA
SetWindowLongW
SetWindowPos
SetWindowTextA
SetWindowTextW
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateMessage
WindowFromPoint
wsprintfA
wsprintfW
GetMessagePos
GetMessageA
GetKeyboardType
GetKeyState
GetIconInfo
GetFocus
GetDlgItemTextW
GetDlgItem
GetCursorPos
GetCursor
GetClientRect
GetClassNameA
GetClassLongW
GetClassInfoW
GetCapture
FrameRect
FindWindowW
FindWindowExW
FillRect
ExitWindowsEx
EnumWindows
EndPaint
EndDialog
EnableWindow
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextA
DrawIconEx
DrawFrameControl
DrawFocusRect
DispatchMessageW
DialogBoxParamW
DestroyWindow
DefWindowProcW
DefWindowProcA
CreateWindowExW
CreateWindowExA
CreateDialogParamW
CloseClipboard
CheckRadioButton
CheckDlgButton
CharUpperW
CharUpperBuffW
CharPrevW
CharNextW
CallWindowProcW
BringWindowToTop
AttachThreadInput
AppendMenuW
AllowSetForegroundWindow
CharLowerW
IsCharLowerW
IsIconic
GetKeyboardLayout
GetParent
CloseDesktop
GetMenuContextHelpId
GetWindowDC
GetClipboardSequenceNumber
CharNextA
PaintDesktop
IsWindowVisible
CreatePopupMenu
GetAsyncKeyState
GetClipboardViewer
CreateMenu
EndMenu
GetDC
GetTopWindow
VkKeyScanW
GetClipboardOwner
GetProcessWindowStation
GetMessageExtraInfo
IsCharUpperW
BeginPaint

gdi32

InvertRgn
PolyPatBlt
PolyPolyline
SelectObject
SetBkColor
SetBkMode
SetDCPenColor
GetTextExtentPointA
SetTextColor
SetTextJustification
SetViewportOrgEx
SetVirtualResolution
SetWinMetaFileBits
StretchDIBits
GetEnhMetaFilePaletteEntries
GetDeviceCaps
EngStretchBltROP
GetCharWidthFloatA
GetBkMode
GdiValidateHandle
GdiSetLastError
GdiPlayDCScript
GdiDeleteSpoolFileHandle
GdiCreateLocalMetaFilePict
SetTextAlign
FillPath
EngBitBlt
EngAlphaBlend
DeleteObject
CreateFontIndirectW
CreateDIBSection
CreateBrushIndirect
ColorMatchToTarget
AddFontResourceTracking
CreateCompatibleDC
SwapBuffers
SaveDC
DeleteMetaFile
AbortDoc
GetDCBrushColor
DeleteEnhMetaFile
AddFontResourceA
UnrealizeObject
CreateSolidBrush
FONTOBJ_pfdg

advapi32

RegOpenKeyExW
RegEnumValueW
RegEnumKeyW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyW
RegSetValueExW

shell32

ShellExecuteW
SHPathPrepareForWriteW
SHPathPrepareForWriteA
SHInvokePrinterCommandW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetFileInfoW
SHGetFileInfo
SHFileOperationW
SHBrowseForFolderW
ExtractIconEx
ExtractIconA
ExtractAssociatedIconExA
DoEnvironmentSubstA

shlwapi

StrRChrW
StrRStrIW
StrCmpNIW

Sections

.text
Size: 991KB - Virtual size: 990KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2a11b10fafda8a1ddbaff55a3ebe4a58

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

shlwapi

Sections

.text Size: 991KB - Virtual size: 990KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 1024B - Virtual size: 832B

.rsrc Size: 50KB - Virtual size: 49KB

.text
Size: 991KB - Virtual size: 990KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 1024B - Virtual size: 832B

.rsrc
Size: 50KB - Virtual size: 49KB