General

  • Target

    66c784ff607d14c995c31f82825d82fe_JaffaCakes118

  • Size

    89KB

  • MD5

    66c784ff607d14c995c31f82825d82fe

  • SHA1

    e1b557bc20e761a3c2de67988496fd9fcc843757

  • SHA256

    7a1822d0ea92d805caabde3b011c0c135d95cef1fe1d234cba88c8d291549682

  • SHA512

    805038e122ade08fdbc6c14c9c1a8fff28b11635275bc4fc81e9115751e23bd834c8c1d59a3c03b3781e2bc96d43495b41343c2eb20a14087d835b75e3bce89d

  • SSDEEP

    1536:uqT83/jqTj8OY16q7v+W2NolXekecuoOhDStMTvHEK3kzmE:lTAH6wJ2CrOkQEKnE

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://ahmed1337.in/phpgate/gate.php

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 66c784ff607d14c995c31f82825d82fe_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections