Behavioral task
behavioral1
Sample
superscan.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
superscan.exe
Resource
win10v2004-20240412-en
General
-
Target
f90b0e30c0bd15279210f6d0e33a4c48_JaffaCakes118
-
Size
239KB
-
MD5
f90b0e30c0bd15279210f6d0e33a4c48
-
SHA1
7aafdf9e5724de529d0f773448bfd01953954a65
-
SHA256
852a2bcb7d358a9354bb80d5b360372693a454345f4aca7659dac95b1c36cc19
-
SHA512
def4b35ef7cc0c803a83654f4761ffb3f0908055cad62295a61c6c88a19d495833a060a33899829bfeb3a74fd9c827aebedb53913aa8b3c7eb9890ab3b7c72bd
-
SSDEEP
3072:d2P4Qe3HOpTaW4xMRS2cxbfJSP8DMRCK18KqNgxi9odmOqGFPKCbC/Ia0bbz+5YS:d+2OIhP2kbfJU8DtAxstO7FNbCobbzDS
Malware Config
Signatures
-
resource yara_rule static1/unpack001/superscan.exe upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/superscan.exe unpack002/out.upx
Files
-
f90b0e30c0bd15279210f6d0e33a4c48_JaffaCakes118.zip
-
superscan.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ