Static task
static1
Behavioral task
behavioral1
Sample
rxbot - Xp/misc.vbs
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
rxbot - Xp/misc.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
rxbot - Xp/rBot.html
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
rxbot - Xp/rBot.html
Resource
win10v2004-20240704-en
General
-
Target
3099d5b88833a7b139d0180ef1a976e8_JaffaCakes118
-
Size
319KB
-
MD5
3099d5b88833a7b139d0180ef1a976e8
-
SHA1
42cd1faa7fb7d85048d6323b5137b021f952bc25
-
SHA256
199ebc8b4c7aaa2f51848af6aa4999118909dd4f2917e1da2ca93909a88b1a35
-
SHA512
09db0103792fc56f7fa60c4f9890234a9338d116841a6b0fbacd52dff52a46823ff24390a043e88a5061624bdf3fbd6b4bac88455fdfdefeedab23dd5bd45434
-
SSDEEP
6144:VnedBA8O2aQqoaxQsx3eLMubqsLJs0IW1j9R3xx2YzRmHqqK:VOBA8baQqoaD3enqlPox3zRuqqK
Malware Config
Signatures
Files
-
3099d5b88833a7b139d0180ef1a976e8_JaffaCakes118.rar
-
rxbot - Xp/advscan.cpp
-
rxbot - Xp/advscan.h
-
rxbot - Xp/aliaslog.cpp
-
rxbot - Xp/aliaslog.h
-
rxbot - Xp/autostart.cpp
-
rxbot - Xp/autostart.h
-
rxbot - Xp/avirus.cpp
-
rxbot - Xp/avirus.h
-
rxbot - Xp/capture.cpp
-
rxbot - Xp/capture.h
-
rxbot - Xp/cdkeys.cpp
-
rxbot - Xp/cdkeys.h
-
rxbot - Xp/configs.h
-
rxbot - Xp/crc32.cpp
-
rxbot - Xp/crc32.h
-
rxbot - Xp/crypt.cpp
-
rxbot - Xp/crypt.h
-
rxbot - Xp/dcc.cpp
-
rxbot - Xp/dcc.h
-
rxbot - Xp/dcom.cpp
-
rxbot - Xp/dcom.h
-
rxbot - Xp/ddos.cpp
-
rxbot - Xp/ddos.h
-
rxbot - Xp/defines.h
-
rxbot - Xp/download.cpp
-
rxbot - Xp/download.h
-
rxbot - Xp/driveinfo.cpp
-
rxbot - Xp/driveinfo.h
-
rxbot - Xp/ehandler.cpp
-
rxbot - Xp/ehandler.h
-
rxbot - Xp/externs.h
-
rxbot - Xp/findfile.cpp
-
rxbot - Xp/findfile.h
-
rxbot - Xp/findpass.cpp
-
rxbot - Xp/findpass.h
-
rxbot - Xp/fphost.cpp
-
rxbot - Xp/fphost.h
-
rxbot - Xp/ftpd.cpp
-
rxbot - Xp/ftpd.h
-
rxbot - Xp/functions.h
-
rxbot - Xp/globals.h
-
rxbot - Xp/httpd.cpp
-
rxbot - Xp/httpd.h
-
rxbot - Xp/icmpflood.cpp
-
rxbot - Xp/icmpflood.h
-
rxbot - Xp/ident.cpp
-
rxbot - Xp/ident.h
-
rxbot - Xp/includes.h
-
rxbot - Xp/irc_send.cpp
-
rxbot - Xp/irc_send.h
-
rxbot - Xp/keylogger.cpp
-
rxbot - Xp/keylogger.h
-
rxbot - Xp/loaddlls.cpp
-
rxbot - Xp/loaddlls.h
-
rxbot - Xp/lsass.cpp
-
rxbot - Xp/lsass.h
-
rxbot - Xp/misc.cpp.vbs
-
rxbot - Xp/misc.h
-
rxbot - Xp/myshellcode.asm
-
rxbot - Xp/net.cpp
-
rxbot - Xp/net.h
-
rxbot - Xp/netutils.cpp
-
rxbot - Xp/netutils.h
-
rxbot - Xp/nicklist.h
-
rxbot - Xp/passwd.h
-
rxbot - Xp/peer2peer.cpp
-
rxbot - Xp/peer2peer.h
-
rxbot - Xp/pingudp.cpp
-
rxbot - Xp/pingudp.h
-
rxbot - Xp/processes.cpp
-
rxbot - Xp/processes.h
-
rxbot - Xp/psniff.cpp
-
rxbot - Xp/psniff.h
-
rxbot - Xp/rBot.cpp
-
rxbot - Xp/rBot.dsp
-
rxbot - Xp/rBot.dsw
-
rxbot - Xp/rBot.h
-
rxbot - Xp/rBot.ncb
-
rxbot - Xp/rBot.opt
-
rxbot - Xp/rBot.plg.html
-
rxbot - Xp/redirect.cpp
-
rxbot - Xp/redirect.h
-
rxbot - Xp/remotecmd.cpp
-
rxbot - Xp/remotecmd.h
-
rxbot - Xp/reqbuf.bin
-
rxbot - Xp/rlogind.cpp
-
rxbot - Xp/rlogind.h
-
rxbot - Xp/rndnick.cpp
-
rxbot - Xp/rndnick.h
-
rxbot - Xp/scan.cpp
-
rxbot - Xp/scan.h
-
rxbot - Xp/secure.cpp
-
rxbot - Xp/secure.h
-
rxbot - Xp/session.cpp
-
rxbot - Xp/session.h
-
rxbot - Xp/shellcode.cpp
-
rxbot - Xp/shellcode.h
-
rxbot - Xp/socks4.cpp
-
rxbot - Xp/socks4.h
-
rxbot - Xp/synflood.cpp
-
rxbot - Xp/synflood.h
-
rxbot - Xp/sysinfo.cpp
-
rxbot - Xp/sysinfo.h
-
rxbot - Xp/tcpflood.cpp
-
rxbot - Xp/tcpflood.h
-
rxbot - Xp/tcpflood2.cpp
-
rxbot - Xp/tcpflood2.h
-
rxbot - Xp/tcpip.h
-
rxbot - Xp/tftpd.cpp
-
rxbot - Xp/tftpd.h
-
rxbot - Xp/threads.cpp
-
rxbot - Xp/threads.h
-
rxbot - Xp/visit.cpp
-
rxbot - Xp/visit.h
-
rxbot - Xp/wildcard.cpp
-
rxbot - Xp/wildcard.h