Overview

overview

10

Static

static

10

5015a5ac82...18.dll

windows7-x64

7

5015a5ac82...18.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5015a5ac829f37e3cbeaf7386a303690_JaffaCakes118

  • Size

    193KB

  • MD5

    5015a5ac829f37e3cbeaf7386a303690

  • SHA1

    6543931dc3a00ad746a794fd12e7ffc8bb40b997

  • SHA256

    39cdb74f93658f65ca6bd63c1db8764e8fa21f20129388360354fd87f17676f0

  • SHA512

    cc25bc904eec0f933db8c93d7ab31af7a5b3403c9c7230de82dae8f47f81144b110ad9c59aa82d23ac329826821f3e225912995a14b558e8872154eec9054abe

  • SSDEEP

    6144:07SzEMKwW2TESRQ+DhsFQpvvjRqUDn4bO:YWTB739N4

Score
10/10
davetrickbot

Malware Config

Signatures

  • Trickbot family
    trickbot
  • Dave packer 1 IoCs

    Detects executable using a packer named 'Dave' by the community, based on a string at the end.

    dave
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5015a5ac829f37e3cbeaf7386a303690_JaffaCakes118
    .dll windows:6 windows x86 arch:x86

    3b878ae32358fc8d57a3806486c1be64


    Headers

    Imports

    Sections