General

  • Target

    ad1e02354bcf5ae9842288250d41baec_JaffaCakes118

  • Size

    92KB

  • MD5

    ad1e02354bcf5ae9842288250d41baec

  • SHA1

    7102f419afad635c5ec1d74af40f265d8a00ce6b

  • SHA256

    887dbaca2b9be74e35d0491c710537f643602b9336239245326187a2a8b4fc73

  • SHA512

    d65d8bc7ca7ee899642e0eb6346d15e34ac5fc44355dd8619759adb1fa873546129c58df88653ffb7087af4fb92c0447687e9610e7b5416f0122e833fb02f147

  • SSDEEP

    1536:AuHhBw+khqTdINUyudk/kdUQFzJgxaVcgPObmfOoCOKNgTvqkzbkYr/q:3Be+kADakdU2zJgxaV+1Owchr/q

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://revistavidanatural.com.br/base/images/DS_Store/proc/calc.php

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ad1e02354bcf5ae9842288250d41baec_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    1f3b7eab7f8ef80c1901611824a3f65d


    Headers

    Imports

    Sections