trickbot | 29cbd0663035187eb7e7cda3afe88af9_JaffaCakes118

Reason

config extraction: Trickbot2019: trickbot: error pe: invalid address pe: invalid address

General

Target
29cbd0663035187eb7e7cda3afe88af9_JaffaCakes118
Size 100KB
Sample240509-ntfhasff3w
SHA256 5731b91e86a2d7377b5c977ea64ccf7e52f4a9478ab9533f46d0499e160ca9aa
MD5 29cbd0663035187eb7e7cda3afe88af9
SHA1 5a19024e352c1b964ad9032eeb0aa89031111c53
SHA512 8974c07398176b280a95a201133d76aecf8f199b92781ea2211244e534f34687dfefc030e5ef440ed25c0cc5bf497197a2c8b2f996547dbb1b2a7cf278ce6935
SSDEEP 3072:oVSk8eNW2ZyKTKbxy2FBB3Z73eIRZwfJnzm:GSkBW2EKTKbxfBpZ7SfBm
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

trickbot

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29cbd0663035187eb7e7cda3afe88af9_JaffaCakes118

SHA256 5731b91e86a2d7377b5c977ea64ccf7e52f4a9478ab9533f46d0499e160ca9aa
MD5 29cbd0663035187eb7e7cda3afe88af9
SHA1 5a19024e352c1b964ad9032eeb0aa89031111c53
SHA512 8974c07398176b280a95a201133d76aecf8f199b92781ea2211244e534f34687dfefc030e5ef440ed25c0cc5bf497197a2c8b2f996547dbb1b2a7cf278ce6935
SSDEEP 3072:oVSk8eNW2ZyKTKbxy2FBB3Z73eIRZwfJnzm:GSkBW2EKTKbxfBpZ7SfBm
MD5 SHA1 SHA512 SSDEEP

Minor OS version

0

Major OS version

4

Entry point

60064

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths