Overview

overview

10

Static

static

10

JaffaCakes...b4.exe

windows7-x64

10

JaffaCakes...b4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_078a960db913167b4e5d8df15b328eb4

  • Size

    44KB

  • MD5

    078a960db913167b4e5d8df15b328eb4

  • SHA1

    591690d8ab8717ddb0569fbb85fae01c294fd497

  • SHA256

    67c0d00d8e40f5df31fd27f2b83cd843e294268ea738adb2891e33394281f76b

  • SHA512

    3f72a2ba4872f6c6c0e8bb4df83305fb9d23580abf37fcb691afd4ecbc7cae8dbf42f0636a4daa34c2d3866d95ee7045aad2df51842dab421ee1f2c4e3e2dc1f

  • SSDEEP

    768:f+4tKIHgPp59CuqLZvdTMlUAnNMAOQW9mdivJGgsebVp5jP7XPG:f7PHSp5XqdvFMKANqR9mfgsknj7X+

Score
10/10
upxpony

Malware Config

Extracted

Family

pony

C2

http://updates211.zapto.org/pony/gate.php

Attributes
  • payload_url

    http://updates211.zapto.org/update211.exe

    http://krush12.no-ip.org/update.exe

Signatures

  • Pony family
    pony
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_078a960db913167b4e5d8df15b328eb4
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections