Overview

overview

10

Static

static

10

JaffaCakes...10.exe

windows7-x64

JaffaCakes...10.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_69e64bf16b5a090ad259e608b9032810

  • Size

    104KB

  • MD5

    69e64bf16b5a090ad259e608b9032810

  • SHA1

    1b1afb86921b65e8760ba5336549307114b3b584

  • SHA256

    c23ebe3ec36e58160eec9f4818abed1ea63690fae4c6ed276ce20051622c28d2

  • SHA512

    2274c16ac9bb9890061d7f1f250bfd83474cf2e07748e09f4857c13892995c79249467cf5deac4a0d8a02b2711a935a94759cfa450623ef705f3d1153d1db059

  • SSDEEP

    1536:svIWOl+pS4qTWWir8oabGPxb5XBdwkOMcMTvjkzk/NCB:0/a+moaiJbykOMp/kB

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://audiomasteringsearch.com/forum/viewtopic.php

http://austinremoterecording.com/forum/viewtopic.php

http://bestseoamerica.com/forum/viewtopic.php

http://bevisiblesem.com/forum/viewtopic.php
Attributes
  • payload_url

    http://www.kavalevent.com/5TH.exe

    http://futuresiouxfalls.com/4Yao.exe

    http://www.mariassunta.it/tJDd63.exe

    http://www.splendidhonda.com/wUy1WgTP.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_69e64bf16b5a090ad259e608b9032810
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections