Overview

overview

10

Static

static

10

2840bc63bb...18.exe

windows7-x64

10

2840bc63bb...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2840bc63bb3809933aee17eb01913c2d_JaffaCakes118

  • Size

    34KB

  • MD5

    2840bc63bb3809933aee17eb01913c2d

  • SHA1

    61ac93dfe5e9e808239025e7f78d9c264034d3b0

  • SHA256

    1b4ecf36d89efba9a3d87c1fa5e1ae76f4edb27ade84bc68ca902e0a92ca74ee

  • SHA512

    8dad82632bcca3b0851c7d44c5ee19a57e1de3d14c0fc7d5f5b340686c44a6bc9dc50c96e3e1b117f13cacfab9e911da2b7e4bcfb8287478f94360fbf650b1d7

  • SSDEEP

    768:3+l0aEDZgEg6ho4rs2ppi9BC3tB/C8TrQY+iz/:u9Ea2HABI1sY+i

Score
10/10
upxpony

Malware Config

Extracted

Family

pony

C2

http://wegotakedistime.ru/ugooo/Panel/gate.php

Signatures

  • Pony family
    pony
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2840bc63bb3809933aee17eb01913c2d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections