Extracted

• • Target

    4c550efd2571f37402b3f64273e03253_JaffaCakes118

  • Size

    1.2MB

  • MD5

    4c550efd2571f37402b3f64273e03253

  • SHA1

    8de01966b27a30eb73bbaaee09f3109c258d6e6b

  • SHA256

    cee3b627af34bf85e8a9aef6e9acec4dce49a9a6b8a9d78e9de3b0de65033257

  • SHA512

    7c7eeb236e1673a67c095700b1a7402884e31fd083fdfc6a3098f6236ab575e43f9ca809d610e2689d919fa8cfe7b12368ac936dec7a1d85a79f1bba661e50e1

  • SSDEEP

    24576:w/04bvRp3TxpOTtuk19o/AqNSOB5Vl8xrRe4Wi3ohwL:+04gErsxq4

  Score

  10^/10

  ponycollectionratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Uses the VBS compiler for execution

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2