General

  • Target

    2d1f9463b2135b9866bcf4fcb87b29d8_JaffaCakes118

  • Size

    161KB

  • MD5

    2d1f9463b2135b9866bcf4fcb87b29d8

  • SHA1

    264e67490d666fcce2e7050864aad580b0c89ee6

  • SHA256

    d301cf5d114de1ab483bd8306885fa61dcffa852d33c44e992d7ffee6017e0a8

  • SHA512

    8a10d749faadd3ece814196a1f80553da5b4b9837371cdda9fe506303d437738d83e219d8498b0e3897ed8a79138345f37b2b2f36f59e6815fc264b88a6d9484

  • SSDEEP

    3072:siTLZhs0uDI0rAfOXl+y+uql/GOtsrVrqhTqndtndhndKndQ:HTLFuD6fOXlql/GLJrqqndtndhndKndQ

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://butterchoco.net/admin/bull/gate.php

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2d1f9463b2135b9866bcf4fcb87b29d8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections