Overview

overview

10

Static

static

10

JaffaCakes...f4.exe

windows7-x64

10

JaffaCakes...f4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_7a738efc167437443992fac4788429f4

  • Size

    91KB

  • MD5

    7a738efc167437443992fac4788429f4

  • SHA1

    9795a60cece2587c303b854fb73bbd6fd1ef27d1

  • SHA256

    38000ba095293a0bac17a5d9178729c447c3c23341c04a924134ba2c249e1f95

  • SHA512

    99b9f6c49b47d8ff96b4ac4a9d14b0aa488f406a24129db000b2d6a58579e1b956890037a415539bbd0dbb8387463ddeae24f8029005eaf46d1025543333f461

  • SSDEEP

    1536:5VAWOyeKz4qTBQNBynjVyeUPlihpON+BdOgcZTvVkzbu/1:D3FeADjVyewohddOgDu/1

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://abemuggs.com/forum/viewtopic.php

http://abes.co/forum/viewtopic.php

http://abes.net/forum/viewtopic.php

http://abesburger.com/forum/viewtopic.php
Attributes
  • payload_url

    http://www.makingachangegroup.org/NoR5.exe

    http://www.arrow2000.ca/RiQw07Xs.exe

    http://abstain.org.uk/2NkRox.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_7a738efc167437443992fac4788429f4
    .exe windows:4 windows x86 arch:x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections