General

  • Target

    b53e01ddbe498d14bc2a1e6386fe96c5_JaffaCakes118

  • Size

    161KB

  • MD5

    b53e01ddbe498d14bc2a1e6386fe96c5

  • SHA1

    ea85db581c3d5795fe8a234e73eff06b943bd2cb

  • SHA256

    307f288685efa3681555e207e637a7a3b7b1f8e934f560c936a5ac03124f8d1b

  • SHA512

    558ad5f8705615cad3182d72979fd09c47db8a14b7b266bcbc538f2cb752ab738d2a96316b918a5ee82937c3c4886e6ae725a084013b2a873770d81673a9e1af

  • SSDEEP

    3072:siTLZhs0uDI0rAfOXl+y+uql/GOtsrVrqhTqndtndhndKnd6:HTLFuD6fOXlql/GLJrqqndtndhndKnd6

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://butterchoco.net/admin/bull/gate.php

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b53e01ddbe498d14bc2a1e6386fe96c5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections