Errors

Reason
config extraction: Trickbot2019: trickbot: error pe: invalid address pe: invalid address

General

  • Target

    3ebacde6c8fd324d46205f0f7b7c27a7_JaffaCakes118

  • Size

    100KB

  • MD5

    3ebacde6c8fd324d46205f0f7b7c27a7

  • SHA1

    4abc6017832d6065b57c6fb61efdeb01df23b7af

  • SHA256

    fadf2e5272fda2f38a981b5bf61c5b9d6d597e25a7ff974116a9e2ce36fc20d4

  • SHA512

    87ac3e40e02fee5090e45b53bfdc6b87ad9dfaa0667877da84c8817cbd2ea41e011556f6a6f3f17be0ad807208930857853023ea50b25a268ed349cf4aadb799

  • SSDEEP

    3072:cJ6RiJq8tGcdmKTob5WubBJrBrGI3ZotjNfzm:O6Ri7Gc0KTob5lHrBkjNm

Score
10/10

Malware Config

Signatures

  • Trickbot family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3ebacde6c8fd324d46205f0f7b7c27a7_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections