General

  • Target

    94ef9174050709d79b86079afb8057dd_JaffaCakes118

  • Size

    86KB

  • MD5

    94ef9174050709d79b86079afb8057dd

  • SHA1

    3de768d52c1b744bb1475d58a7b3ee46cd64d905

  • SHA256

    998c6eab51ced7946dbefa5126ccac470617759faafd3d669714dcd53b6e37cd

  • SHA512

    fc7c2a126588ed627cc02cac3be01e01a1305445748c327eba32a3aa452478dbc59d182fd850beac122f12d2bdde099c7b17c87cb3148be3551995aa5124fecc

  • SSDEEP

    1536:VIwLYkxSqTqKlUkHEXXXybkeXZtCO6hfCkzbkoR/l:+qpxPEr5O6JX9R/l

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://cl98203.tmweb.ru/panel/gate.php

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 94ef9174050709d79b86079afb8057dd_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    6112ac1abcf5fa0d96ec0b4b96090842


    Headers

    Imports

    Sections