General

  • Target

    0d2befd7425ffaa86b33b1c0e7ed896d_JaffaCakes118

  • Size

    89KB

  • MD5

    0d2befd7425ffaa86b33b1c0e7ed896d

  • SHA1

    7d86a0a9f2f473fc4765fc54a62bc0876fe1df57

  • SHA256

    fcf98d1ccbbacaaf741c1d8cef624c3ce2ea55d596f4c1a405487a1ddc49369d

  • SHA512

    fbab7dd95291bc6eb96867a9ecfbe6424092f7845ce37c2414c9adc653fc56745e2a6bd36e2be767f786a1f652b28242c8baea5a1963adc2e8ad6143bfd28316

  • SSDEEP

    1536:Ra9Mr5BqTbOem1jaEiubqfqtvWUgKwcOZ9nGTv8E6LjkzmxTy:Q9KNbdbqfqJObE6HM

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://pocoxxmas.gq/wp/pony_eng/gate.php

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0d2befd7425ffaa86b33b1c0e7ed896d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    fbab3e022f0aa68f4af07dff0d4cfb9f


    Headers

    Imports

    Sections