General

  • Target

    41b8e2b8581fe67f5900f2f31cbe79bf_JaffaCakes118

  • Size

    161KB

  • MD5

    41b8e2b8581fe67f5900f2f31cbe79bf

  • SHA1

    f3a1aef120d6687c23403bb3c711cc26069b7fbc

  • SHA256

    09dcebaccc9cc7b0ba4a0e5f2d1b57d758599446f745b120f8b52f09afac3852

  • SHA512

    8b9ce9bfba6473c878a6b6ffc75f3bb596b8489c9010f82e6d8330f88c49faa69713d7b8c812c190be72aa33091ddad031ddd34dda798a79470f318c0a0295ed

  • SSDEEP

    3072:8MTLZhs0uDI0rAfOXl+y+uql/GOtsrVrqhTqndtndhndKndI:FTLFuD6fOXlql/GLJrqqndtndhndKndI

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://butterchoco.net/admin/bull/gate.php

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 41b8e2b8581fe67f5900f2f31cbe79bf_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections