Overview

overview

10

Static

static

10

d72a6486db...18.exe

windows7-x64

10

d72a6486db...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d72a6486db46182ed472350da2a606d3_JaffaCakes118

  • Size

    89KB

  • MD5

    d72a6486db46182ed472350da2a606d3

  • SHA1

    595b50808b4372471723819582e851415c3c688c

  • SHA256

    78eec192c4bd8d7fc516ccc0d6c3f93916b538c327bcc8ebb9c2af2c1b693dd8

  • SHA512

    9023cc0e96b27cb78f3d985d65564d0952a942ccf7c1199079942ad5502d19601e510e4bcc035966d268b7a00e01948badb40c62b741b5577a36930b8bd69c65

  • SSDEEP

    1536:zqH83Tl8qTM6gWkzeaCvr/wiBiaETky4iIOTdnlYTvEE6mkzma:OHUieh/TBiKOJ3E62a

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://gymea.nerdster.com.au/wp-admin/ses/panelnew/gate.php

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d72a6486db46182ed472350da2a606d3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    fbab3e022f0aa68f4af07dff0d4cfb9f


    Headers

    Imports

    Sections