Overview

overview

10

Static

static

10

0e2c887fcc...18.exe

windows7-x64

10

0e2c887fcc...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0e2c887fccfce1f326c2fa66ad25f93b_JaffaCakes118

  • Size

    34KB

  • MD5

    0e2c887fccfce1f326c2fa66ad25f93b

  • SHA1

    ffb4780da0020ac8853a152cf7c4473f1cf9b803

  • SHA256

    e66d83eed2edbe9415f1ad9b6fbe9efa064d5359bfc28f31efeca1e630103729

  • SHA512

    9a8d4a9c7a4c5d7dc8c74de4b57bd58b8422b548e9d1039f8732fd6d9f8fc4427bb08a2bae28a0fb7ae5650839c5d9f50d4b7ef598f5248e8b94a9d743c7c6d3

  • SSDEEP

    768:WO2DZg3ukgSeuGxyh+GNyypqYHQ40GHKSjQyXnYtpQflASTIG:r26WNuyO+GNYtSEyXYCl/TIG

Score
10/10
upxpony

Malware Config

Extracted

Family

pony

C2

http://updateguru.xyz/fanta/Panel/gate.php

Signatures

  • Pony family
    pony
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0e2c887fccfce1f326c2fa66ad25f93b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections