General

  • Target

    a3edc13ab2e43de4a5e54cf3eb6232a7_JaffaCakes118

  • Size

    90KB

  • MD5

    a3edc13ab2e43de4a5e54cf3eb6232a7

  • SHA1

    79b2dbcb52ddd6bf512294d1216750ba59eb3c17

  • SHA256

    bbd22f394c8f1248d2cbb97ffe8720268acc18904e755b3b1186cea0fb769c52

  • SHA512

    9146eee1bd06242af639fae2a7aae02859f4d0a67bdf9798dcb7e8c15d83b46329716f5cb5e73e9b0f2e0ae112733ca4269bb17b9e77c9059a96c04babe16d12

  • SSDEEP

    1536:J6SWEQrsLXOTQvT4qpWnyrlAtyDn4YhOfcdbwRAJjqkkzmt2l:oSWVyv8qpWnym8vOGbjjqotm

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://111.90.147.66/panel/gate.php

http://111.90.147.66/panel/2018

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a3edc13ab2e43de4a5e54cf3eb6232a7_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections