Static task
static1
Behavioral task
behavioral1
Sample
RMOD002/misc.vbs
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
RMOD002/misc.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
RMOD002/rBot.html
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
RMOD002/rBot.html
Resource
win10v2004-20241007-en
General
-
Target
39e7f09134f511b1393c7fb5749c2e87_JaffaCakes118
-
Size
3.1MB
-
MD5
39e7f09134f511b1393c7fb5749c2e87
-
SHA1
01cb86930ee42462e854656e4b5135ee447f9d4c
-
SHA256
b80c654073c733ba094e14b5fecf4b5b635aedb548eedb476d7028126a168650
-
SHA512
8eafb9c3ba5906600aace911106e03bd9d79363795acaeb0290fef74e7689f73449ca078a72125c2cde84ede039afaa7294f3961a6d29aaf48f3ff83e884371d
-
SSDEEP
98304:rcu1JAAd68Jfq93gk/6OvDUab/RkEf3ekH2:Qud68Jfq9wgvgimE2kH2
Malware Config
Signatures
Files
-
39e7f09134f511b1393c7fb5749c2e87_JaffaCakes118.rar
-
RMOD002/advscan.cpp
-
RMOD002/advscan.h
-
RMOD002/aimspread.cpp
-
RMOD002/aimspread.h
-
RMOD002/aliaslog.cpp
-
RMOD002/aliaslog.h
-
RMOD002/autostart.cpp
-
RMOD002/autostart.h
-
RMOD002/avirus.cpp
-
RMOD002/avirus.h
-
RMOD002/capture.cpp
-
RMOD002/capture.h
-
RMOD002/cdkeys.cpp
-
RMOD002/cdkeys.h
-
RMOD002/configs.h
-
RMOD002/crc32.cpp
-
RMOD002/crc32.h
-
RMOD002/crypt.cpp
-
RMOD002/crypt.h
-
RMOD002/dcc.cpp
-
RMOD002/dcc.h
-
RMOD002/ddos.cpp
-
RMOD002/ddos.h
-
RMOD002/defines.h
-
RMOD002/download.cpp
-
RMOD002/download.h
-
RMOD002/driveinfo.cpp
-
RMOD002/driveinfo.h
-
RMOD002/ehandler.cpp
-
RMOD002/ehandler.h
-
RMOD002/externs.h
-
RMOD002/findfile.cpp
-
RMOD002/findfile.h
-
RMOD002/findpass.cpp
-
RMOD002/findpass.h
-
RMOD002/fphost.cpp
-
RMOD002/fphost.h
-
RMOD002/ftpd.cpp
-
RMOD002/ftpd.h
-
RMOD002/functions.h
-
RMOD002/globals.h
-
RMOD002/httpd.cpp
-
RMOD002/httpd.h
-
RMOD002/icmpflood.cpp
-
RMOD002/icmpflood.h
-
RMOD002/ident.cpp
-
RMOD002/ident.h
-
RMOD002/iis5ssl.cpp
-
RMOD002/iis5ssl.h
-
RMOD002/includes.h
-
RMOD002/irc_send.cpp
-
RMOD002/irc_send.h
-
RMOD002/keylogger.cpp
-
RMOD002/keylogger.h
-
RMOD002/loaddlls.cpp
-
RMOD002/loaddlls.h
-
RMOD002/misc.cpp.vbs
-
RMOD002/misc.h
-
RMOD002/ms04_007_asn1.cpp
-
RMOD002/ms04_007_asn1.h
-
RMOD002/net.cpp
-
RMOD002/net.h
-
RMOD002/netutils.cpp
-
RMOD002/netutils.h
-
RMOD002/nicklist.h
-
RMOD002/pingudp.cpp
-
RMOD002/pingudp.h
-
RMOD002/processes.cpp
-
RMOD002/processes.h
-
RMOD002/psniff.cpp
-
RMOD002/psniff.h
-
RMOD002/rBot.cpp
-
RMOD002/rBot.dsp
-
RMOD002/rBot.dsw
-
RMOD002/rBot.h
-
RMOD002/rBot.ncb
-
RMOD002/rBot.opt
-
RMOD002/rBot.plg.html
-
RMOD002/rBot.sln
-
RMOD002/rBot.vcproj.xml
-
RMOD002/redirect.cpp
-
RMOD002/redirect.h
-
RMOD002/remotecmd.cpp
-
RMOD002/remotecmd.h
-
RMOD002/reqbuf.bin
-
RMOD002/rlogind.cpp
-
RMOD002/rlogind.h
-
RMOD002/rndnick.cpp
-
RMOD002/rndnick.h
-
RMOD002/scan.cpp
-
RMOD002/scan.h
-
RMOD002/secure.cpp
-
RMOD002/secure.h
-
RMOD002/session.cpp
-
RMOD002/session.h
-
RMOD002/shellcode.cpp
-
RMOD002/shellcode.h
-
RMOD002/socks4.cpp
-
RMOD002/socks4.h
-
RMOD002/synflood.cpp
-
RMOD002/synflood.h
-
RMOD002/sysinfo.cpp
-
RMOD002/sysinfo.h
-
RMOD002/tcpflood.cpp
-
RMOD002/tcpflood.h
-
RMOD002/tcpflood2.cpp
-
RMOD002/tcpflood2.h
-
RMOD002/tcpip.h
-
RMOD002/tftpd.cpp
-
RMOD002/tftpd.h
-
RMOD002/threads.cpp
-
RMOD002/threads.h
-
RMOD002/visit.cpp
-
RMOD002/visit.h
-
RMOD002/wildcard.cpp
-
RMOD002/wildcard.h
-
RMOD002/workstation.cpp
-
RMOD002/workstation.h
-
RMOD002/~readme~.txt