General

  • Target

    b0424e2a4583d67983df302278f376ce_JaffaCakes118

  • Size

    67KB

  • MD5

    b0424e2a4583d67983df302278f376ce

  • SHA1

    f3c0c9165b001889c886a7680036992816eda918

  • SHA256

    e72068e57289e278bc1b5329c4aa90c634c3627215618730516c9f89e55dd130

  • SHA512

    2f2caa7b97c72160740ba1208ee61f927300b095c7416f231438eb38392bde0aa5467237ca354e3eea4a87aecc0165a7de99a01e6c193032fe6a2f17fc5ef733

  • SSDEEP

    1536:yTjGxKPHTcUvJRKm80xc+5yIIlAhJ40EZA0ZfsmQ1On:yTj6mzBRKmvsAhHEC0Z0O

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b0424e2a4583d67983df302278f376ce_JaffaCakes118
    .rar
  • AddEditDir.frm
  • Balk.cls
  • Burro.vbp
  • Burro.vbw
  • FTPServ.ico
  • FindFolder.frm
    .vbs
  • FindFolder.frx
  • FndFile.bas
    .vbs
  • MSSCCPRJ.SCC
  • MainApp.cls
  • Profiles.bas
    .vbs
  • UserOpts.frm
    .vbs
  • UserOpts.frx
  • VBSOCK.BAS
    .vbs
  • WindProc.bas
    .vbs
  • Winsock.bas
  • burro.exe
    .exe windows:4 windows x86 arch:x86

    02d961a28975522feeb677f411a89ee3


    Headers

    Imports

    Sections

  • burro.ini
  • frmFtp.frm
    .vbs
  • frmFtp.frx
  • frmProcess.frm
  • 下载说明.htm
    .html .js polyglot