Behavioral task
behavioral1
Sample
0717f29ae7ec6cc97e12a18fc664a8b0_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
0717f29ae7ec6cc97e12a18fc664a8b0_JaffaCakes118
-
Size
1.2MB
-
MD5
0717f29ae7ec6cc97e12a18fc664a8b0
-
SHA1
c174d779aff51c082b73e7ecbbec30aec487edc6
-
SHA256
89f48b2e8af218186c370460d8f26dd906c4bbb8f1fa5538bbfa66fa4e0c8766
-
SHA512
5c98fc3b9f7c12f23709c486356f38351e95aae51a584c7a8cd650332a463863cfcd16a7593a320bd6756696aa1484d18011f55387122fc660e284b0088bda2c
-
SSDEEP
3072:ic+zvth1m5KhHoOHEJg/u39aFl3BrNCxxY+cjzxVWFMeB9UipaZs1+BgvefXB/G6:iceL/IOugS4rvzatwt2vefRp
Malware Config
Extracted
pony
http://grupoalfra.cl/images/img/png/Panelx/gate.php
Signatures
-
Pony family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0717f29ae7ec6cc97e12a18fc664a8b0_JaffaCakes118
Files
-
0717f29ae7ec6cc97e12a18fc664a8b0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE