General

  • Target

    afe3b5d9629080fd73b318fc96faddc3_JaffaCakes118

  • Size

    161KB

  • MD5

    afe3b5d9629080fd73b318fc96faddc3

  • SHA1

    020f8ce737b6b7e2cc73f0a3593787f75d03679c

  • SHA256

    00316460c556cb2c2ce1a77e7db296bfbff41044713098892245d68df5eb2938

  • SHA512

    7015fc7a90755b80620ff07880345cf6200bcf59301c40d1c99572e59446fa59e5f8420c25a197c405be15808ba01d8cf041eef3214513daa991a5bee3cccc54

  • SSDEEP

    3072:vTLZhs0uDI0rAfOXl+y+uql/GOtsrVrqhTqndtndhndKndI:vTLFuD6fOXlql/GLJrqqndtndhndKndI

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://butterchoco.net/admin/bull/gate.php

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • afe3b5d9629080fd73b318fc96faddc3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections