Overview

overview

10

Static

static

10

JaffaCakes...e0.exe

windows7-x64

10

JaffaCakes...e0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_68356b302ef6978c76afe74df50d6ae0

  • Size

    91KB

  • MD5

    68356b302ef6978c76afe74df50d6ae0

  • SHA1

    83beea6d49fe0643aebcfed3c61c64cd3ed4761a

  • SHA256

    6c91e728ea4a1a713098f40759da590138025e4917dfd5a0a69c1f2bd2997b6f

  • SHA512

    d9ae7950eda656c6caf749ceade32d1854d38ddb25f2f604465b54f30c673149d247f92aca5268d7761d043a9cc2d0cd4663453f14d19055f8586dd30f03580b

  • SSDEEP

    1536:hfLWuxPx64qTws/F7bMmw1dUWkT9pc7OPcLTv4kzb1/c:NSeP38bMxQWD7OPY1/c

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://douglasvillestorage.com/forum/viewtopic.php

http://herblade.com/forum/viewtopic.php

http://novafitnesstrainer.com/forum/viewtopic.php

http://rippedtrainer.com/forum/viewtopic.php
Attributes
  • payload_url

    http://charlemonttv.com/amfK.exe

    http://project5.ignitee.com/7rq7.exe

    http://www.inmagonzalez.com/9NMJ.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_68356b302ef6978c76afe74df50d6ae0
    .exe windows:4 windows x86 arch:x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections