Errors

Reason
config extraction: Trickbot2019: trickbot: error pe: invalid address pe: invalid address

General

  • Target

    1d41b3296235ba50d54f36e4d1ffeec4_JaffaCakes118

  • Size

    100KB

  • MD5

    1d41b3296235ba50d54f36e4d1ffeec4

  • SHA1

    02906efa55fa1e873a8ee0ac7013e7caa5347fb2

  • SHA256

    30749839df5adcd27e904672d0252ba3beb0ccbdccb912f7f16d88888e0f871c

  • SHA512

    9c8fa5343bba6260ce66e526def5176215a0c359e6c7e01f00cffc16272f4c8c89c35de0fca09561ec1dd6ac7b95e1d876a07c6b1ba47d7524cd816c0d6bc1dc

  • SSDEEP

    3072:oVSk8eNW2ZyKTKbxy2FBB3Z73eIRZwfJnzm8:GSkBW2EKTKbxfBpZ7SfBm8

Score
10/10

Malware Config

Signatures

  • Trickbot family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1d41b3296235ba50d54f36e4d1ffeec4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections