Behavioral task
behavioral1
Sample
159c104fd53f7a5aca1b151b737a3414.exe
Resource
win7-20220812-en
General
-
Target
159c104fd53f7a5aca1b151b737a3414.exe
-
Size
82KB
-
MD5
159c104fd53f7a5aca1b151b737a3414
-
SHA1
67076107929bfd9feee6cbfe6fc6af2151150471
-
SHA256
7b076dfdd977c60fdf1b3378dfe6eeb8c26bd7208d5b2dd865ddcb8ab69abe38
-
SHA512
ce537ab1d5072c19fbff2990106244f71ebd7eee8c79efd8c59f138185f229da64b0f04f9db4be6562d7e3ac853ac9787eb8a2bed324a756faf5a2ec29bc19f6
-
SSDEEP
1536:K1SoVf3PqTAqkP+l5hcV4iM89Jh1hFSRAOAEj4kzmt:KEoJzS5hcPtthOAEjEt
Malware Config
Extracted
pony
http://fatfucker.web44.net/Panel/gate.php
Signatures
-
Pony family
Files
-
159c104fd53f7a5aca1b151b737a3414.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE