Static task
static1
Behavioral task
behavioral1
Sample
SBot_1.99.34.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
SBot_1.99.34.exe
Resource
win10v2004-20240802-en
General
-
Target
87ae7b96683d2dbad9832b7d96a5df3f_JaffaCakes118
-
Size
9.2MB
-
MD5
87ae7b96683d2dbad9832b7d96a5df3f
-
SHA1
5309af42b1f4e1aeb44224dcf4f9e1849b805c1d
-
SHA256
2cc8ac4af42848d64f525edeeea52ebbcb8cf1a2204af068c435e9479b7bb281
-
SHA512
349f5b3d595c6b2f5bd27f7c3e22d44694d6f3cc13f3eb0519162f95c8b8b99ba9bcd834f03dc159ada1a668aeb825bdc893e940e221a85a25f77208a2b55aa7
-
SSDEEP
196608:n1dEfwRqEU+TJlH/GmnBNEnsCVb/81mWvgvvwgFFQTShNX6+FeGHov:n1dMEqEU+7Hbc5/81cvIgFdhg+UX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SBot_1.99.34.exe
Files
-
87ae7b96683d2dbad9832b7d96a5df3f_JaffaCakes118.zip
-
SBot_1.99.34.exe.exe windows:5 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 2.4MB - Virtual size: 22.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.v-lizer Size: 777KB - Virtual size: 777KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ypxlcyio Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
teyyevba Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
navdata/cnav01.dat
-
navdata/cnav04.dat
-
navdata/cnav05.dat
-
navdata/cnav06.dat
-
navdata/cnav07.dat
-
navdata/cnav10.dat
-
navdata/cnav11.dat
-
navdata/cnav12.dat
-
navdata/cnav13.dat
-
navdata/cnav14.dat
-
navdata/cnav15.dat
-
navdata/cnav16.dat
-
navdata/cnav18.dat
-
navdata/cnav19.dat
-
navdata/cnav20.dat
-
navdata/cnav21.dat
-
navdata/cnav22.dat
-
navdata/nav01.dat
-
navdata/nav02.dat
-
navdata/nav03.dat
-
navdata/nav04.dat
-
navdata/nav05.dat
-
navdata/nav06.dat
-
navdata/nav07.dat
-
navdata/nav08.dat
-
navdata/nav09.dat
-
navdata/nav10.dat
-
navdata/nav11.dat
-
navdata/nav12.dat
-
navdata/nav13.dat
-
navdata/nav14.dat
-
navdata/nav15.dat
-
navdata/nav16.dat
-
navdata/nav17.dat