Behavioral task
behavioral1
Sample
NGVCK.exe
Resource
win7-20240708-en
General
-
Target
974ace785031778244fff8c8196ef6a3_JaffaCakes118
-
Size
260KB
-
MD5
974ace785031778244fff8c8196ef6a3
-
SHA1
9ee8e09db392c05936cfb71730305e97cf81fd25
-
SHA256
62e57ec778bc3d99f06545e3189280e22c6334e0d2e7e5883d4f52694b4fc0c5
-
SHA512
f20462df1b87a33482b3e00ff9cfabda350b9524a7e800c7f68bd3b41f77887db557427df35f5c99a0e11c0d39e07823b0dc67cf9ce6947124b9db3ab4f37844
-
SSDEEP
6144:fpsgJz4V5MblUvqcMW9j3LbN3Qycl5tmUZ77:fJOyU7rbN3tY3tR7
Malware Config
Signatures
-
resource yara_rule static1/unpack001/NGVCK.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/NGVCK.exe
Files
-
974ace785031778244fff8c8196ef6a3_JaffaCakes118.zip
-
History.txt
-
NGVCK.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 262KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Readme.txt