Behavioral task
behavioral1
Sample
7b076dfdd977c60fdf1b3378dfe6eeb8c26bd7208d5b2dd865ddcb8ab69abe38.exe
Resource
win7-20220812-en
General
-
Target
c19893357599b148313437801fbe0222b37b43641501481799c1d83f16698f3c
-
Size
82KB
-
MD5
6118586775ae252111962b7210b72a63
-
SHA1
ebcdd2db5a162024e892ea991b2f973890c2a494
-
SHA256
c19893357599b148313437801fbe0222b37b43641501481799c1d83f16698f3c
-
SHA512
17d87ce17cadbccc3460267978c8a45bbb708cc995a47855e0f4206bde00df7b5d953c295bf77d85015cf79a7e68d7953ec1954eebeca89ed1e99dc1173efaff
-
SSDEEP
1536:01SoVf3PqTAqkP+l5hcV4iM89Jh1hFSRAOAEj4kzmtG:0EoJzS5hcPtthOAEjEtG
Malware Config
Extracted
pony
http://fatfucker.web44.net/Panel/gate.php
Signatures
-
Pony family
Files
-
c19893357599b148313437801fbe0222b37b43641501481799c1d83f16698f3c.zip
-
7b076dfdd977c60fdf1b3378dfe6eeb8c26bd7208d5b2dd865ddcb8ab69abe38.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE