Errors

Reason
config extraction: Trickbot2019: trickbot: error pe: invalid address pe: invalid address

General

  • Target

    1d0cd5058514360992353611fa3edba7_JaffaCakes118

  • Size

    120KB

  • MD5

    1d0cd5058514360992353611fa3edba7

  • SHA1

    64cd650fc3c6a9066e0bba60426e4c7a6ae8473f

  • SHA256

    d13d2e998e405eb58f39636b28e8bbd1e976da2d93a9811685a0c8693d181359

  • SHA512

    5a9566fdad59dba7f6b55def841ec91259e0589dba2f60b09c15a1433135ec26321fb38f2e5e2864efa457776fa76e03dfbf38766d8e3cbf60e14c1df54367b7

  • SSDEEP

    3072:LJDVK7KwEJcyO8cXw9Yczmv364COGx+rQtOfan:LJIKwpyO8cX4YczmiCQtO2

Score
10/10

Malware Config

Signatures

  • Trickbot family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1d0cd5058514360992353611fa3edba7_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections