General

  • Target

    8ffd6f345170c086d4245f2435f7736b_JaffaCakes118

  • Size

    136KB

  • MD5

    8ffd6f345170c086d4245f2435f7736b

  • SHA1

    a0cb42f18a588128b2d4353cfa84c7bed52e81c0

  • SHA256

    996419d0a4aead32fda8759d6ef0ff092c6aa3962a530e04b0229c67a46005c1

  • SHA512

    c0076664e1f5da267f67a719083728cff73a4a090f453c8075104b5e9cf6e53c1d751432ea84a22f777fa51ad4dcedc8e3a4e10b40a9340db807a866d1202082

  • SSDEEP

    3072:IHnhrsj7eEGsLCz2OTRKCqPEWtsrVrqh:IHnM7ees2OT+czJr

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://www.humblelogs.com.ng/legend/Server/gate.php

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8ffd6f345170c086d4245f2435f7736b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    085f942c74d09a78dcd2b95a4c1c7441


    Headers

    Imports

    Sections