Overview

overview

10

Static

static

10

b4d3cb22dc...18.exe

windows7-x64

10

b4d3cb22dc...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b4d3cb22dce7fe6408dfa283cd720b70_JaffaCakes118

  • Size

    88KB

  • MD5

    b4d3cb22dce7fe6408dfa283cd720b70

  • SHA1

    445058b9bb3e04462e64f575c21b96aba45882a0

  • SHA256

    c8e0b68845b5a2162b1d05d22610d26325c2e140fe307040bcb4dec3d7c7b843

  • SHA512

    efd796657b60dccf2c93c99e5ece62cd29d5fa6e5226b8a4c2192a45acc3be2dbea2dc117b03372246e1effe6199d141f30949f04f2b10edb40f8f45822afc32

  • SSDEEP

    1536:x3V3e8KytqTZkYu5SCvaDBzgM+5zu9kS24zxAkOg8WTvMEIpkzZ3:9dOy+ubiDBzv+1H4OgYEIi3

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://colegiosapiens.com.br/default.php?nMaMRMh41dpaaYrJvdIneUOViuqyxa

http://jaaduworks.com/default.php?QAHAuo1djztvP6O8bUmmLlK3jdfEaVCdp9ALI

http://technickartridg.ir/default.php?5JBfqfOJidAbg4CgAy2wGGskKM57BEmyl

http://europeanplanthireservices.co.uk/default.php?EjVWYZC6JVhOfNr9R5Mt

http://cincoonce.com/default.php?25oloNvVfuTyPfnZQIgRhvWAuGwpiDhxtVTDe4

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b4d3cb22dce7fe6408dfa283cd720b70_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    728afd0aeb7539a2a721ececf5f36865


    Headers

    Imports

    Sections