General

  • Target

    00da227ab9ed05c46e38aa0ccbf52b4f_JaffaCakes118

  • Size

    104KB

  • MD5

    00da227ab9ed05c46e38aa0ccbf52b4f

  • SHA1

    c3e6a80fa7b96d2a5c836b3d96a186091ba2c550

  • SHA256

    bb5d5f14655f12fe2c1d726c0c9199307a0ed03ca03381fe31023cc3747980bc

  • SHA512

    87bd91f08c3a9ff75dd4180c6d37f3bd124849886262ff374d20c37f7a1981a2d8d305a48067dc8c90ce44c73fbe8ae1028b05a82f7e3f5331c406d622b04d05

  • SSDEEP

    1536:VeORxEvCUqTdwhUZRDUOdpUPKaeGo5NSc0n9zqst0OIyzCTv2xkzkotiNV:EOq6TbAOdpUSaeG0IP0OZzxYif

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://98.142.221.58/~comsgautopart/.regedit/mail/home/gate.php

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 00da227ab9ed05c46e38aa0ccbf52b4f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    1f3b7eab7f8ef80c1901611824a3f65d


    Headers

    Imports

    Sections