General

  • Target

    49540be26f09c9030730cb8b1afa082f_JaffaCakes118

  • Size

    161KB

  • MD5

    49540be26f09c9030730cb8b1afa082f

  • SHA1

    9f1604b782b3a13182c40917dc0f22d3e82dd34d

  • SHA256

    46b36a801cb5a85e09e1e1f04f644292500166e2e573599d171f25f8826ecbba

  • SHA512

    7a26d5d06df635ef482f181c1f43d03472feaee6e81b5bc00ed07836941da87aedf9b9d1b204fb21d56e9ad22d2288f2687adc209a290783aa4837c59eda6eb3

  • SSDEEP

    3072:mDTLZhs0uDI0rAfOXl+y+uql/GOtsrVrqhTqndtndhndKndI:ITLFuD6fOXlql/GLJrqqndtndhndKndI

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://butterchoco.net/admin/bull/gate.php

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 49540be26f09c9030730cb8b1afa082f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections