CYPRUS[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CYPRUS.rar
Size

5.3MB
MD5

ce9be4f44e43bc47bd8440a0b8a966a3
SHA1

b84f0c945ec22b73023484c32cb2698cf94a0a8e
SHA256

1fa027183508fc564a4eabcd104b39ff6aa63de65164920dbb58b7a294645ce0
SHA512

56f140b924d8ca8130197d0e39d5732becfa2b9feb4e2c5e658074636c5e21f67dd03071a704db49f93fac774d07022759783b4de8e05d3c105991a3aa3f948f
SSDEEP

98304:gfDv+3loN97QWAEe3mraRuBM2LxJqmQS/QZ+atGwpr6qPyzMIvGz9bKm6nEjSui6:gfT+1s9pQ56MkVQS/QZ+at/B6qPywTFb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/CYPRUS.exe

Files

CYPRUS.rar
.rar
CYPRUS.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ