Extracted

• • Target

    919ce928f627d7003e6eaf2f00109f8d_JaffaCakes118

  • Size

    376KB

  • MD5

    919ce928f627d7003e6eaf2f00109f8d

  • SHA1

    3752101916bff18606addbeaa3e2a712e68e5bd3

  • SHA256

    61389b6d2648abddd2e16826c26c6b7b57cccc4902af8c0f916820e79f410242

  • SHA512

    0689a102cc0ed5bb36554023a0c91e575d1c2dc77dd7add8f9d053c97b7f251d1b55589088cdc55f39b8346e37c7309d2babc1d0f1cb1d7d79586ddc4aae37b3

  • SSDEEP

    6144:Lg9JwKFfqy1qYjOfcDxIPkgn7zW7iNyKIl+zQ+/Qb62:8xaw8Rn7lI6

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealerupx

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Uses the VBS compiler for execution

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2