Overview

overview

10

Static

static

10

04b30d62e6...18.exe

windows7-x64

3

04b30d62e6...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

Errors

Reason
config extraction: Trickbot2019: trickbot: error pe: invalid address pe: invalid address

General

  • Target

    04b30d62e68954d26bd37bc4cc9fd130_JaffaCakes118

  • Size

    100KB

  • MD5

    04b30d62e68954d26bd37bc4cc9fd130

  • SHA1

    1eff32fdfcce46db7c02cbf421623d3c492d9054

  • SHA256

    9ae33bf19730190ea69f6e6210fbd38889d964912f18447e595ba93faf4ddcd7

  • SHA512

    cfaad74c1911544602ebd90322d1aedf37509a86bcc78820735187993c58e13c1c2d4b1d763f99563c3ec85e67a1aeaac9783c9580304ff66241621db4d68890

  • SSDEEP

    3072:oVSk8eNW2ZyKTKbxy2FBB3Z73eIRZwfJnzm:GSkBW2EKTKbxfBpZ7SfBm

Score
10/10
trickbot

Malware Config

Signatures

  • Trickbot family
    trickbot
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 04b30d62e68954d26bd37bc4cc9fd130_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections