General

  • Target

    f91edb1eb9ad0a68e7b407802fd90ad7_JaffaCakes118

  • Size

    83KB

  • MD5

    f91edb1eb9ad0a68e7b407802fd90ad7

  • SHA1

    2167f2a26f40fe0c1c12977fa3b29d4ed7458053

  • SHA256

    2c2cea36437ddb630119424ad48309bfdac91b243d2770fa03ad14383cfe8d66

  • SHA512

    67f0313606991a11a8bd4569fc945fceec7bcb718ae3e54f5a98425c71c208edf401d9bad0a246bf4d7a5918e0016a62cf50f15b51be6102b65039c360bd1dad

  • SSDEEP

    1536:iaj2Wn/CqToAJM61mQ0Yaljw4CvmSjqtjYFrawO+EnsTkzmi:lj9MrQ0PvCvmFN6O+EnsLi

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://csisa.cardinalassistance.com/contacts.asp

http://blogmagomarameo.com/blog/bug.php

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f91edb1eb9ad0a68e7b407802fd90ad7_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    d777357137fc148884e24f774b09e366


    Headers

    Imports

    Sections