Overview

overview

10

Static

static

10

8aaf1711de...18.exe

windows7-x64

10

8aaf1711de...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8aaf1711deb592b8f90ff9166baabfe2_JaffaCakes118

  • Size

    34KB

  • MD5

    8aaf1711deb592b8f90ff9166baabfe2

  • SHA1

    1cea2a6a6083880437eb08b3d67a7b20b4f81c8f

  • SHA256

    dbc6772cc73b52e49ce4bdb9212550980801d9feeda42ac2d1dbea750706c9f9

  • SHA512

    fed10a29aa8a66849c313125111794b2084a86238396a53c2424f66e5f5eb179eab2a2784adf1046e23667fb3adb62a6db2ab48f9807ddb7ffd2e935d4d694ed

  • SSDEEP

    768:GtCDZgEAYVuwtb8rXMFoDTrn4LB1zaUxJ8HzglCXPPlcRYXNNIi:JTVV98rXMFoDTrnIB1zaGE4Gai

Score
10/10
upxpony

Malware Config

Extracted

Family

pony

C2

http://198.15.101.98/pony/gate.php

Signatures

  • Pony family
    pony
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8aaf1711deb592b8f90ff9166baabfe2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections