Errors

Reason
config extraction: Trickbot2019: trickbot: error pe: invalid address pe: invalid address

General

  • Target

    009fc6f2e034451509e775bf10cad05c_JaffaCakes118

  • Size

    121KB

  • MD5

    009fc6f2e034451509e775bf10cad05c

  • SHA1

    5da8b58466e5d44138e6cdd73b96028b234027b8

  • SHA256

    d40f227c8284a03a6b782bb66e37316d070484e6906d4545aa4eabdb5e177d63

  • SHA512

    f90621f939a1367659370031327f48d7e8a20107eb9ba888ef65db49a4e72e9c865cb3a60579ac37f2ae6d00cd1854280fb84f9c84e087c5d787917eb0a45f2b

  • SSDEEP

    3072:XsK2vc2jYVCf0d2vqWJcYFfJ81fziTd/:XsKqc2jGC8+fJcfzg

Score
10/10

Malware Config

Signatures

  • Trickbot family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 009fc6f2e034451509e775bf10cad05c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections