General

  • Target

    2e1c4323e9867bcd3dfcb22a7df3d37d_JaffaCakes118

  • Size

    161KB

  • MD5

    2e1c4323e9867bcd3dfcb22a7df3d37d

  • SHA1

    ddebb667b66637ccaf3a19d3e1a3cc37e355197e

  • SHA256

    5013f2bd48af44e5f3ebe349d672cc4eebdf6519eaecac5b2d8e75fbb700a540

  • SHA512

    718036f506a213859abbbc01a22cc45c94211002b5a53f14669cf53a04b3048d8ae439215f9f5f4985cedd890ee62365962f630ec1b57f168405788d34e288d0

  • SSDEEP

    3072:ZsTLZhs0uDI0rAfOXl+y+uql/GOtsrVrqhTqndtndhndKndf:2TLFuD6fOXlql/GLJrqqndtndhndKndf

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://butterchoco.net/admin/bull/gate.php

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2e1c4323e9867bcd3dfcb22a7df3d37d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections