General

  • Target

    17d31fafda8317f75783e456be8b51d4_JaffaCakes118

  • Size

    473KB

  • MD5

    17d31fafda8317f75783e456be8b51d4

  • SHA1

    ac38ce5b9891c8364832562335d492eb79babe1c

  • SHA256

    96d016ece33c1e754f085cc23fc8575d41d891b9567976349f977fcf05712266

  • SHA512

    6504c3d19d75404bdd054b19805e8e29731e9138b3253da5857b8121c3823eec5ac53181deb3cd9bb813cffc484e163c603a255ee5ff2d77d5928169962b5a93

  • SSDEEP

    1536:O+mxRcLMqTFwdcv9zj9U/7D59eq7P5NMqikqOoiLOTvskzbksr/PYRHPDjamzra2:NGiLvlzj9UTD59r5cOvY9r/EHrjXq2

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://keytrxlink.xyz/pny/chs/cache.php

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 17d31fafda8317f75783e456be8b51d4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    1f3b7eab7f8ef80c1901611824a3f65d


    Headers

    Imports

    Sections