Behavioral task
behavioral1
Sample
ac22ac53d2c0bd2748813fa469fda020_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
ac22ac53d2c0bd2748813fa469fda020_JaffaCakes118
-
Size
2.6MB
-
MD5
ac22ac53d2c0bd2748813fa469fda020
-
SHA1
d9273fe1be8f4ba9c9dc4b3db91dfeaf15234094
-
SHA256
ba0f694bf960ec05b849a058ddb3dafd7d83cda68e6efef548ada88e1e495f8d
-
SHA512
cf95456fe3aec8bbea4b00b70f1dad32e0e21ecb9d5ee6a9e0e586dd1e6c85d3ac42ddd9ed74b7dcc7f01b5a359700de837163416ff06a3c700211cb302ba6a6
-
SSDEEP
49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlR:86SIROiFJiwp0xlrlR
Malware Config
Extracted
pony
http://don.service-master.eu/gate.php
-
payload_url
http://don.service-master.eu/shit.exe
Signatures
-
Pony family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac22ac53d2c0bd2748813fa469fda020_JaffaCakes118
Files
-
ac22ac53d2c0bd2748813fa469fda020_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ