Behavioral task
behavioral1
Sample
NGVCK.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
NGVCK.exe
Resource
win10v2004-20240704-en
General
-
Target
27144f3568c67b7c7d3bdf2b1cca0e86_JaffaCakes118
-
Size
274KB
-
MD5
27144f3568c67b7c7d3bdf2b1cca0e86
-
SHA1
803a2457273689c427563b093e817a75c1885e75
-
SHA256
252e045164d8ee474dfc43a94bc373de06f16c08bfe452f93d95ec1c37b415ef
-
SHA512
082a9953fee620f7a2f07786319a50e2520651edcc41ab677a80fe319427ac5942062d3420462f1bfa86f12c0d035648c8878ed146e4d18bd691472099852d00
-
SSDEEP
6144:r6f9rrMC1obqK7YU0pixsc6IyB2uCXoa557s/RWmO/0:r6ZQCaGK7tkAyVB2RXoa5BmO8
Malware Config
Signatures
-
resource yara_rule static1/unpack001/NGVCK.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/NGVCK.exe
Files
-
27144f3568c67b7c7d3bdf2b1cca0e86_JaffaCakes118.zip
-
History.txt
-
NGVCK.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 275KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Readme.txt