General

  • Target

    9355545683427235e665a6bf5aaabf6e_JaffaCakes118

  • Size

    2.6MB

  • MD5

    9355545683427235e665a6bf5aaabf6e

  • SHA1

    28937d57e4e94c3deaf205dc632c0262da1c1539

  • SHA256

    dfa8c1d206dd18cf3cf204dd07e84fa761eb7e647a1d0b9513f5b11d7d862b46

  • SHA512

    ba616103a2550a5bb4c40363cbf69d6abcacad2806062eaaccc4f65e037ef14223bf09badcccba486a457f5bc6e0809140a74df0e6990cb46628f099701c6fe9

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlr:86SIROiFJiwp0xlrlr

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9355545683427235e665a6bf5aaabf6e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections