Static task
static1
Behavioral task
behavioral1
Sample
misc.vbs
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
misc.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
rBot.html
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
rBot.html
Resource
win10v2004-20241007-en
General
-
Target
29e1fafb39c6670f142c08555965df87_JaffaCakes118
-
Size
278KB
-
MD5
29e1fafb39c6670f142c08555965df87
-
SHA1
c000c7b6ac2c4de6d3074f39276083c7bbef98dc
-
SHA256
be62aba44a2d8b03dad09badcdc4f99bf76fc74abbf43b44fc02ec1e37a8e5d0
-
SHA512
1347ffac54b24c61ccfe9c0703cbaf9d590daab04cec3b2c2986bee0c77d6e4016528c3488c9b8474767e58e8d3b900579848124baa2a65cfd1787273c20e239
-
SSDEEP
6144:nXWQc7fkD2J53mcNgwD7gUWI6kdyfxbkrqj7:nXAjRN9D7gUDV8fG0
Malware Config
Signatures
Files
-
29e1fafb39c6670f142c08555965df87_JaffaCakes118.rar
-
Debug/rBot.pdb
-
advscan.cpp
-
advscan.h
-
aliaslog.cpp
-
aliaslog.h
-
autostart.cpp
-
autostart.h
-
avirus.cpp
-
avirus.h
-
beagle.cpp
-
beagle.h
-
capture.cpp
-
capture.h
-
cdkeys.cpp
-
cdkeys.h
-
changes.txt
-
configs.h
-
crc32.cpp
-
crc32.h
-
crypt.cpp
-
crypt.h
-
dameware.cpp
-
dameware.h
-
dcc.cpp
-
dcc.h
-
dcom.cpp
-
dcom.h
-
dcom2.cpp
-
dcom2.h
-
ddos.cpp
-
ddos.h
-
defines.h
-
download.cpp
-
download.h
-
driveinfo.cpp
-
driveinfo.h
-
ehandler.cpp
-
ehandler.h
-
externs.h
-
findfile.cpp
-
findfile.h
-
findpass.cpp
-
findpass.h
-
fphost.cpp
-
fphost.h
-
functions.h
-
globals.h
-
httpd.cpp
-
httpd.h
-
icmpflood.cpp
-
icmpflood.h
-
ident.cpp
-
ident.h
-
includes.h
-
irc_send.cpp
-
irc_send.h
-
keylogger.cpp
-
keylogger.h
-
kuang2.cpp
-
kuang2.h
-
list.txt
-
loaddlls.cpp
-
loaddlls.h
-
lsass.cpp
-
lsass.h
-
misc.cpp.vbs
-
misc.h
-
mssql.cpp
-
mssql.h
-
mydoom.cpp
-
mydoom.h
-
myshellcode.asm
-
net.cpp
-
net.h
-
netbios.cpp
-
netbios.h
-
netdevil.cpp
-
netdevil.h
-
netutils.cpp
-
netutils.h
-
nicklist.h
-
optix.cpp
-
optix.h
-
passwd.h
-
peer2peer.cpp
-
peer2peer.h
-
pingudp.cpp
-
pingudp.h
-
processes.cpp
-
processes.h
-
psniff.cpp
-
psniff.h
-
rBot.cpp
-
rBot.dsp
-
rBot.dsw
-
rBot.h
-
rBot.ncb
-
rBot.opt
-
rBot.plg.html
-
redirect.cpp
-
redirect.h
-
remotecmd.cpp
-
remotecmd.h
-
reqbuf.bin
-
rlogind.cpp
-
rlogind.h
-
rndnick.cpp
-
rndnick.h
-
scan.cpp
-
scan.h
-
secure.cpp
-
secure.h
-
session.cpp
-
session.h
-
shellcode.cpp
-
shellcode.h
-
socks4.cpp
-
socks4.h
-
sub7.cpp
-
sub7.h
-
synflood.cpp
-
synflood.h
-
sysinfo.cpp
-
sysinfo.h
-
tcpflood.cpp
-
tcpflood.h
-
tcpflood2.cpp
-
tcpflood2.h
-
tcpip.h
-
tftpd.cpp
-
tftpd.h
-
threads.cpp
-
threads.h
-
upnp.cpp
-
upnp.h
-
visit.cpp
-
visit.h
-
webdav.cpp
-
webdav.h
-
wildcard.cpp
-
wildcard.h
-
workstation.cpp
-
workstation.h