General

  • Target

    9c6b1dc24b785b25bfbab911014a4154_JaffaCakes118

  • Size

    161KB

  • MD5

    9c6b1dc24b785b25bfbab911014a4154

  • SHA1

    3d4d1733fdd715f7bcee8395c46aa43abaf56d03

  • SHA256

    cf1471bb6ec50bc663693c9a8d5cbab26f43cdcd73fb0ef8160fa34032ac7d00

  • SHA512

    277cabdb5c4ddb056521d8404d3c8ac492ee7f536297c487a776d414e5bb89976b5f8977622902747ca0ec96af48ed44aa571b172662ea9a3b9d8b621826b1fd

  • SSDEEP

    3072:iDTLZhs0uDI0rAfOXl+y+uql/GOtsrVrqhTqndtndhndKndI:wTLFuD6fOXlql/GLJrqqndtndhndKndI

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://butterchoco.net/admin/bull/gate.php

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9c6b1dc24b785b25bfbab911014a4154_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections