General

  • Target

    b1a4c27df51d8e5d5f7fdd355f84cb23_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b1a4c27df51d8e5d5f7fdd355f84cb23

  • SHA1

    33688313d8e0af808ab614c8487684d93048d64a

  • SHA256

    4d93ca31addf9e83ba93da8620d665a226f2fbe49c4649a964fef775d05ed498

  • SHA512

    076b7eebe9791dfdcc998f59829bb61b2ca09494574274c3c858cfc33f794a06ecb531f6df70660eb1ac1f1c1efa8e3967a1043af6dfd08852e0b52f6e44d188

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZY:0UzeyQMS4DqodCnoe+iitjWwwU

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b1a4c27df51d8e5d5f7fdd355f84cb23_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections