ncsc_cyberforce[.]exe | Triage

Resubmissions

02/10/2023, 16:13

231002-tpbw7sce4w 3

02/10/2023, 16:12

231002-tnmmbaec27 3

02/10/2023, 16:09

231002-tl6meaeb96 3

Sharing

Copy URL Twitter E-mail

General

Target

ncsc_cyberforce.exe
Size

10KB
MD5

b5155aaac04d5be04ecd2bc3352c2201
SHA1

b86f85569417353b7302d9fff4d757ec082a2e03
SHA256

7cecc756a3e3e1156539da6ed9d9ff8910aea61ac129e01b452eddb1d5b68127
SHA512

2d66b01619a5ca7894ba3953ca905b08fbf9d0c967caf22dd2d8738e453d14cbe862a0c4f7d19bc35a6cea75806880954ccc1ed33d21191686875a01883c211e
SSDEEP

192:khxBHcVqzqqr30/W8njfSnq5LiENoq2+S5q/N:kbBHcVje3twfT1Ftl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ncsc_cyberforce.exe

Files

ncsc_cyberforce.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ