Pony (2).rar
- SHA256 8ddff8ec17bcc2c72452902f7ad6323b0c330e726b755fc60269015bff1d0fb4
Overview
overview
10Static
static
5Pony 1.9/p...ls.bat
windows10-2004-x64
3Pony 1.9/p...ls.bat
windows11-ltsc_2024-x64
3Pony 1.9/p...er.exe
windows10-2004-x64
10Pony 1.9/p...er.exe
windows11-ltsc_2024-x64
5Pony 1.9/web/404.html
windows10-2004-x64
3Pony 1.9/web/404.html
windows11-ltsc_2024-x64
3Pony 1.9/w...dex.js
windows10-2004-x64
3Pony 1.9/w...dex.js
windows11-ltsc_2024-x64
3Pony 1.9/w...ex.ps1
windows10-2004-x64
3Pony 1.9/w...ex.ps1
windows11-ltsc_2024-x64
3Behavioral task
behavioral1
Sample
Pony 1.9/pony/BuilderSrc/ASkin/DelphiXE2/acShellCtrls.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Pony 1.9/pony/BuilderSrc/ASkin/DelphiXE2/acShellCtrls.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Pony 1.9/pony/PonyBuilder.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Pony 1.9/pony/PonyBuilder.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Pony 1.9/web/404.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Pony 1.9/web/404.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Pony 1.9/web/adm/index.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Pony 1.9/web/adm/index.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
Pony 1.9/web/adm/install/index.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Pony 1.9/web/adm/install/index.ps1
Resource
win11ltsc2024-20260709-en
| resource | yara_rule |
|---|---|
| static1/unpack001/Pony 1.9/pony/PonyBuilder.exe | upx |
| static1/unpack001/Pony 1.9/pony/masm32/bin/upx.exe | upx |
| static1/unpack001/Pony 2.0/Pony/PonyBuilder.exe | upx |
| static1/unpack001/Pony 2.0/Pony/masm32/bin/upx.exe | upx |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/Pony 1.9/pony/BuilderSrc/CalcModuleSize/CalcModuleSize.exe |
| unpack001/Pony 1.9/pony/PonyBuilder.exe |
| unpack002/out.upx |
| unpack001/Pony 1.9/pony/masm32/bin/brcc32.exe |
| unpack001/Pony 1.9/pony/masm32/bin/cvtres.exe |
| unpack001/Pony 1.9/pony/masm32/bin/cw3220mt.dll |
| unpack001/Pony 1.9/pony/masm32/bin/ml.exe |
| unpack001/Pony 1.9/pony/masm32/bin/rw32core.dll |
| unpack001/Pony 1.9/pony/masm32/bin/upx.exe |
| unpack001/Pony 2.0/Pony/BuilderSrc/CalcModuleSize/CalcModuleSize.exe |
| unpack001/Pony 2.0/Pony/PonyBuilder.exe |
| unpack004/out.upx |
| unpack001/Pony 2.0/Pony/masm32/bin/JWASM.EXE |
| unpack001/Pony 2.0/Pony/masm32/bin/polib.exe |
| unpack001/Pony 2.0/Pony/masm32/bin/upx.exe |
| unpack001/Pony 2.0/Pony/masm32/bin/wrc.exe |
Codesigned file was signed by an untrusted entity.
| resource |
|---|
| unpack001/Pony 1.9/pony/masm32/bin/polib.exe |
| unpack001/Pony 1.9/pony/masm32/bin/polink.exe |
| unpack001/Pony 2.0/Pony/masm32/bin/polink.exe |
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=1, productName=Unmarked objects,
count=2, id=16, version=7346,
count=41, id=2, version=7274,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=15, productName=Unmarked objects (old),
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=64, id=1, productName=Unmarked objects,
count=3, id=19, version=8034,
count=1, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=20, id=14, version=7299,
count=3, productName=Unmarked objects (old),
count=157, id=10, productName=VS98 (6.0) build 8168, version=8168,
Unsigned PE
Checks for missing Authenticode signature.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Mar 24, 2008
CN=smorgasbordet.com,O=Pelle Orinius,L=Stockholm,C=SE,1.2.840.113549.1.9.1=#0c1770656c6c6540736d6f72676173626f726465742e636f6d
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Nov 20, 2010
CN=Per Orinius,OU=StartCom Verified Certificate Member,L=Stockholm,ST=Stockholms,C=SE,1.2.840.113549.1.9.1=#0c1770656c6c6540736d6f72676173626f726465742e636f6d,2.5.4.13=#13173138383839322d673032525a4a6b3746774c3936397a77
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.