C:\Users\Jonni\Desktop\UDOBot_v.4.1.1\UDOBot.pdb
Static task
static1
Behavioral task
behavioral1
Sample
UDOBot_v5.0/UDOBot.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
UDOBot_v5.0/UDOBot.exe
Resource
win10v2004-20240226-en
General
-
Target
eb88e7c75a0d617c77b1dbfea9fd4e3f_JaffaCakes118
-
Size
2.0MB
-
MD5
eb88e7c75a0d617c77b1dbfea9fd4e3f
-
SHA1
8f73ccfc9ca606717b8714a8c994e9af02e48249
-
SHA256
9a81e8d90063e7afa2cbe948338e50f71b92a47e8f6487ede455fec00d154d81
-
SHA512
d7c169c5f1991e806120dcb5617803da76f493d5f7ff7d27ba4d8322caa8ccb58bfc3dc40358a2b26996ee4ec5ad9a3649c92ae2767baefa4eeb6e2799ffda8c
-
SSDEEP
49152:eeGqmzEsKmVuJvPjB7wgldrCEzE5siqfnAYxiy:PGqsE9mVuJXjB7RHiqRH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/UDOBot_v5.0/UDOBot.exe
Files
-
eb88e7c75a0d617c77b1dbfea9fd4e3f_JaffaCakes118.rar
-
UDOBot_v5.0/UDOBot.exe.exe windows:5 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 217KB - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
UDOBot_v5.0/img/-1.jpg.jpg
-
UDOBot_v5.0/img/0.jpg.jpg
-
UDOBot_v5.0/img/1.jpg.jpg
-
UDOBot_v5.0/img/10.jpg.jpg
-
UDOBot_v5.0/img/11.jpg.jpg
-
UDOBot_v5.0/img/12.jpg.jpg
-
UDOBot_v5.0/img/13.jpg.jpg
-
UDOBot_v5.0/img/14.jpg.jpg
-
UDOBot_v5.0/img/15.jpg.jpg
-
UDOBot_v5.0/img/16.jpg.jpg
-
UDOBot_v5.0/img/17.jpg.jpg
-
UDOBot_v5.0/img/18.jpg.jpg
-
UDOBot_v5.0/img/19.jpg.jpg
-
UDOBot_v5.0/img/2.jpg.jpg
-
UDOBot_v5.0/img/20.jpg.jpg
-
UDOBot_v5.0/img/21.jpg.jpg
-
UDOBot_v5.0/img/22.jpg.jpg
-
UDOBot_v5.0/img/23.jpg.jpg
-
UDOBot_v5.0/img/24.jpg.jpg
-
UDOBot_v5.0/img/25.jpg.jpg
-
UDOBot_v5.0/img/26.jpg.jpg
-
UDOBot_v5.0/img/27.jpg.jpg
-
UDOBot_v5.0/img/28.jpg.jpg
-
UDOBot_v5.0/img/29.jpg.jpg
-
UDOBot_v5.0/img/3.jpg.jpg
-
UDOBot_v5.0/img/4.jpg.jpg
-
UDOBot_v5.0/img/5.jpg.jpg
-
UDOBot_v5.0/img/6.jpg.jpg
-
UDOBot_v5.0/img/7.jpg.jpg
-
UDOBot_v5.0/img/8.jpg.jpg
-
UDOBot_v5.0/img/9.jpg.jpg
-
UDOBot_v5.0/img/Thumbs.db
-
UDOBot_v5.0/img/UDOBot_IMG.jpg.jpg
-
UDOBot_v5.0/img/portal.png.png
-
UDOBot_v5.0/img/spacestation_1.png.png
-
UDOBot_v5.0/img/spacestation_2.png.png
-
UDOBot_v5.0/img/spacestation_3.png.png
-
UDOBot_v5.0/settings/setting1.udb
-
UDOBot_v5.0/temp.udbt