Static task
static1
Behavioral task
behavioral1
Sample
SBotR_1.0.11.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
SBotR_1.0.11.exe
Resource
win10v2004-20240508-en
General
-
Target
03f99ef279047b8d9bb357b1c8482ff8_JaffaCakes118
-
Size
8.4MB
-
MD5
03f99ef279047b8d9bb357b1c8482ff8
-
SHA1
326d3f5e20a67bf7ede40ecb4e6b4d088739bdc6
-
SHA256
a1fd56e85a7dc6d687342b6cb2f5316ed205272cc5121e55fe77458044925811
-
SHA512
ec02d70369428b4a2b12651eeeb211f0faae66ab459054747ef36dbe3579ef404ad02de8612df1b5848ecfcc604839f078b8aa1f05c934cbcb7d32e825b005db
-
SSDEEP
196608:gtVcPwAX8Lm3edG3QACsCVb/8pntVs32Zy0NMzed3m2bBPyc:gtVk9XXedG39C5/8pntVsGZtNMiBm2pz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SBotR_1.0.11.exe
Files
-
03f99ef279047b8d9bb357b1c8482ff8_JaffaCakes118.zip
-
SBotR_1.0.11.exe.exe windows:5 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 1.8MB - Virtual size: 7.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.v-lizer Size: 852KB - Virtual size: 852KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vzeunvez Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bumnjlwb Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
navdata/cnav01.dat
-
navdata/cnav04.dat
-
navdata/cnav05.dat
-
navdata/cnav06.dat
-
navdata/cnav07.dat
-
navdata/cnav10.dat
-
navdata/cnav11.dat
-
navdata/cnav12.dat
-
navdata/cnav13.dat
-
navdata/cnav14.dat
-
navdata/cnav15.dat
-
navdata/cnav16.dat
-
navdata/cnav18.dat
-
navdata/cnav19.dat
-
navdata/cnav20.dat
-
navdata/cnav21.dat
-
navdata/cnav22.dat
-
navdata/nav01.dat
-
navdata/nav02.dat
-
navdata/nav03.dat
-
navdata/nav04.dat
-
navdata/nav05.dat
-
navdata/nav06.dat
-
navdata/nav07.dat
-
navdata/nav08.dat
-
navdata/nav09.dat
-
navdata/nav10.dat
-
navdata/nav11.dat
-
navdata/nav12.dat
-
navdata/nav13.dat
-
navdata/nav14.dat
-
navdata/nav15.dat
-
navdata/nav16.dat
-
navdata/nav17.dat