General

  • Target

    ca4d866b2b6101778e5eda20fe2b6e1d_JaffaCakes118

  • Size

    2.6MB

  • MD5

    ca4d866b2b6101778e5eda20fe2b6e1d

  • SHA1

    868561adc68bfe5cef2d0a34917f9665f99944a4

  • SHA256

    b99cf0d333d34247348384a36a01586f73bb42ec8aeaa14d66a66e9ba1d98853

  • SHA512

    c2aa9993d0975932d7029ef08faa7261eb99957e48b86c8921912a67ac37f03d8dbddb3bd691935a5c86a14a219d7ddb6172deab4aac5a967c260f64111daa35

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlp:86SIROiFJiwp0xlrlp

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ca4d866b2b6101778e5eda20fe2b6e1d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections