General

  • Target

    da65d4955d9d1105b48844e9aa6a2d8d_JaffaCakes118

  • Size

    97KB

  • MD5

    da65d4955d9d1105b48844e9aa6a2d8d

  • SHA1

    bfbe292e0c51cbf5ddd5915278b469e5386badd1

  • SHA256

    a18c94e5accc57dfcc26ce58e5234ad4faff6a839bcfa667c50dc4cf2ad2370d

  • SHA512

    408b8526ab0f0d781fa2f1cc6fcdd55269fcbd231034bd435bb9aa886748862ee022263d6490c63b82fce6a71b8f08fceb5b046cb4cd6e3345854b697a9ec026

  • SSDEEP

    1536:Eu8qJNZsqTPGYsxfCzqeLGDkDPMXWyAmUpaRyJOXHF+Ab1Tv5kzbknql/G+qhr:jTLZhs0uDI0rAfOXl+yQuql/G+qh

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://209.222.110.181/k/panelnew/gate.php

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • da65d4955d9d1105b48844e9aa6a2d8d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    085f942c74d09a78dcd2b95a4c1c7441


    Headers

    Imports

    Sections