Overview

overview

10

Static

static

10

7d48788255...18.exe

windows7-x64

10

7d48788255...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7d48788255b2d00b291ebe56833a1778_JaffaCakes118

  • Size

    34KB

  • MD5

    7d48788255b2d00b291ebe56833a1778

  • SHA1

    35e156ffffcd9b2be8bff9c8ea96f12c6da6af96

  • SHA256

    a1d21de5c2a0cea04c4369ff98d30b3ebdd46f070e4f324e44a2cbdb7151192d

  • SHA512

    ac9ad41fe905ba0db188f1e1adf7708379fc200d23628701e2bee404abad6fa7e34e4cd7fc075c805f92d6aa7ce8a881b9341f265acce4e71a17fb504028edb2

  • SSDEEP

    768:1oxLUQIjTOqmIHXNCJgfyB6o4L7q8ls42aFXRJnfsj7saF1:+xLtEX+B6oCq8C42aFh1f8h1

Score
10/10
upxpony

Malware Config

Extracted

Family

pony

C2

http://bantil.us/Panel/gate.php

Signatures

  • Pony family
    pony
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 7d48788255b2d00b291ebe56833a1778_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections