General

  • Target

    7c4de6a65dd0e3aa6d0e2fae7262ca16_JaffaCakes118

  • Size

    89KB

  • MD5

    7c4de6a65dd0e3aa6d0e2fae7262ca16

  • SHA1

    1825269173c5c9acfc80a97a1a5bdef9176cd4ac

  • SHA256

    9a495e1b10b576ccc693a7e4292bfef7fe533f67d6d4d449aebba57d80aee051

  • SHA512

    c291d5c9191cc78e939be35e7005eaa3e3805267c169152b70c63902b752dded6cd17de1e87aa4355f162ac2159f479c7ae67e3e29b88da3edbe36b8a381e248

  • SSDEEP

    1536:Qq7c33BqTMykuINnBMLq7CtrPkY6UWEG5OQn/Gx2TvYEKkkzmy:z7Ihau7Chr0ORJEKoy

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://gamestoredownload.download/setupcrossp/setupcrossp/gate.php

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7c4de6a65dd0e3aa6d0e2fae7262ca16_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    fbab3e022f0aa68f4af07dff0d4cfb9f


    Headers

    Imports

    Sections