General

  • Target

    afaf7e3cfc463ac5e933d9a7f613e4c1_JaffaCakes118

  • Size

    2.6MB

  • MD5

    afaf7e3cfc463ac5e933d9a7f613e4c1

  • SHA1

    955ff37b812f0c30bb50cf95511375fbc2fd27b7

  • SHA256

    ce7883a62b13df142160c9b1c8df91e019f18e2cc9719d6a30ef398cc313e387

  • SHA512

    464c5860bbaf97ddacd03c110ecc0316687c961dedf3da2dd48d21f64dbe2ff1021393a0f86784838c23df5a985c5050f1b89abe49126ffe37b61801eee0da73

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlE:86SIROiFJiwp0xlrlE

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • afaf7e3cfc463ac5e933d9a7f613e4c1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections