General

  • Target

    9e0a9a26517078d0663631c6362ac6f4_JaffaCakes118

  • Size

    161KB

  • MD5

    9e0a9a26517078d0663631c6362ac6f4

  • SHA1

    092beb6d18bd128ad05e091cc0a7ab822f2f76ee

  • SHA256

    7e5dceeac445e31431a15fb95194e8990aafff9f260f128fd7e455edeaade986

  • SHA512

    94081ff724bc59c8ae81f8d99973ffe95b261554e4334bdb8915be77ab9a6f0ede1946dfd159f02d18dc00126bdf461ef102087f6c4ebfeecc716e26d18a05f3

  • SSDEEP

    3072:oTLZhs0uDI0rAfOXl+y+uql/GOtsrVrqhTqndtndhndKndI:oTLFuD6fOXlql/GLJrqqndtndhndKndI

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://butterchoco.net/admin/bull/gate.php

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9e0a9a26517078d0663631c6362ac6f4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections