pony | 9d25b0749d2105e5da7552c5bdc98664f69604e0e17eaf259673aded03d40680

Sharing

Copy URL

Twitter E-mail

General

Target

9d25b0749d2105e5da7552c5bdc98664f69604e0e17eaf259673aded03d40680
Size

88KB
MD5

66130161c3e9dfb1cd6f5ce0065c4bc8
SHA1

18c4093b84c077f8930c6091237749e5c18dd0b1
SHA256

9d25b0749d2105e5da7552c5bdc98664f69604e0e17eaf259673aded03d40680
SHA512

4ba68b506e898df5fd91c6920323107d98472d8ce96cb6261cc4d97e99c62e3ab90843988af025bb1101f272c276a9dd6f7d99a7d2a87c35dcd47148b44e44e3
SSDEEP

1536:x3V3e8KytqTZkYu5SCvaDBzgM+5zu9kS24zxAkOg8WTvMEIekzZ3:9dOy+ubiDBzv+1H4OgYEIR3

Score

10^/10

pony

Malware Config

Extracted

Family

pony

http://shivamauxichem.com/default.php?yTfVhmjTXLm3HjnxhAfOkiU3Qp9SdC6JL

http://inglesamericano.edu.gt/default.php?x7z5cFlYMS5Jxxrijlf4OwAzAutD7

http://frederickscottarcher.com/default.php?kgKoqcurdpQWAfo5IqowU7y2tiB

http://artdeciel.com/default.php?uE2HN31OsigbCP7qD8uAqU8f4vXgCS8Cheh8LL

http://tastefulspace.com/default.php?XwE3Vu15haKu28EwKMaPqgtX6jJv2KVRdK

Signatures

Pony family
pony

Files

9d25b0749d2105e5da7552c5bdc98664f69604e0e17eaf259673aded03d40680
.exe windows x86

728afd0aeb7539a2a721ececf5f36865

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
ReadFile
CloseHandle
WriteFile
lstrlenA
GlobalLock
GlobalUnlock
LocalFree
LocalAlloc
lstrcpyA
lstrcatA
GetFileAttributesA
ExpandEnvironmentStringsA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
LoadLibraryA
GetProcAddress
GetTempPathA
CreateDirectoryA
DeleteFileA
GetCurrentProcess
WideCharToMultiByte
GetLastError
lstrcmpA
CreateToolhelp32Snapshot
Process32First
OpenProcess
Process32Next
FindFirstFileA
lstrcmpiA
FindNextFileA
FindClose
GetModuleHandleA
GetVersionExA
GetLocaleInfoA
GetSystemInfo
GetWindowsDirectoryA
GetPrivateProfileStringA
SetCurrentDirectoryA
GetPrivateProfileSectionNamesA
GetPrivateProfileIntA
GetCurrentDirectoryA
lstrlenW
MultiByteToWideChar
GetTickCount
Sleep
GetModuleFileNameA
LCMapStringA
ExitProcess
SetUnhandledExceptionFilter

ole32

CreateStreamOnHGlobal
GetHGlobalFromStream
CoCreateGuid
CoTaskMemFree
CoCreateInstance
OleInitialize

user32

wsprintfA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyA
RegEnumKeyExA
RegCreateKeyA
RegSetValueExA
IsTextUnicode
RegOpenCurrentUser
RegEnumValueA
GetUserNameA

wininet

InternetCrackUrlA
InternetCreateUrlA

shlwapi

StrStrIA
StrRChrIA
StrToIntA
StrStrA
StrCmpNIA
StrStrIW

wsock32

inet_addr
gethostbyname
socket
connect
closesocket
send
select
recv
setsockopt
WSAStartup

userenv

LoadUserProfileA
UnloadUserProfile

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Extracted

Signatures

Files

728afd0aeb7539a2a721ececf5f36865

Headers

File Characteristics

Imports

kernel32

ole32

user32

advapi32

wininet

shlwapi

wsock32

userenv

Sections

.text Size: 69KB - Virtual size: 68KB

.rdata Size: 512B - Virtual size: 256B

.data Size: 18KB - Virtual size: 19KB

.text
Size: 69KB - Virtual size: 68KB

.rdata
Size: 512B - Virtual size: 256B

.data
Size: 18KB - Virtual size: 19KB