General

  • Target

    4dbd4aa461a87901237c61de6b45a083_JaffaCakes118

  • Size

    161KB

  • MD5

    4dbd4aa461a87901237c61de6b45a083

  • SHA1

    e0f44a05759564ec2f729d403df9b7bf99e7892a

  • SHA256

    3460b370972bbc2ec17c307c6d4d7a93490081ef03673af01d70ea2e865ceff8

  • SHA512

    f1441c9488dd75536381c91d8e995856865e341e562d9cd511a9601f8f38b533b486f7b33e9c348c3b28a319bf35e69fd0f0726a800441c2b63a782e012fcd63

  • SSDEEP

    3072:siTLZhs0uDI0rAfOXl+y+uql/GOtsrVrqhTqndtndhndKnds:HTLFuD6fOXlql/GLJrqqndtndhndKnds

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://butterchoco.net/admin/bull/gate.php

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4dbd4aa461a87901237c61de6b45a083_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections