General

  • Target

    4c7a8765b515d3ad48e36c0d1f63d958_JaffaCakes118

  • Size

    89KB

  • MD5

    4c7a8765b515d3ad48e36c0d1f63d958

  • SHA1

    ee4057df317a38dece26ca0d07322662a880e23b

  • SHA256

    286f70a141947be49020336923abe4a29fa30e91ae261ef0b96a64a931c8878c

  • SHA512

    3c7b80890b079a0ca9d85b2f90dca835ac3fdc3348248236e2199bc55babcf26c0e703b837969bf2a2d8262b744a3d5b108b62559d4c67283b7e9f3457bb644e

  • SSDEEP

    1536:9EYAfk9qTMaPexa3S7Q0vgmojELObNt+OFXLlYTvEE6ikzmi:uY/68Q0Imo4OJ3E66i

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://gitarisgitarplus.com/wp-admeans/gate.php

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4c7a8765b515d3ad48e36c0d1f63d958_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections