Errors

Reason
config extraction: Trickbot2019: trickbot: error pe: invalid address pe: invalid address

General

  • Target

    5b41863edb6497db87dab02969ec7592_JaffaCakes118

  • Size

    100KB

  • MD5

    5b41863edb6497db87dab02969ec7592

  • SHA1

    dd607fa62884660cd46a0d2fbd4ffd4d9aa80fba

  • SHA256

    4a691fa978366b8270449e75f32c74863e2a01368bcd92994d0dff3b739357f0

  • SHA512

    ee28fc7c9bd98f2744593564e7043f59f1aea7b877c83f0c0729805a7661db895e9c43ec56388de5fd6de2cb91468f185eaee51e15d20489d32b056aa6efef43

  • SSDEEP

    3072:oVSk8eNW2ZyKTKbxy2FBB3Z73eIRZwfJnzm:GSkBW2EKTKbxfBpZ7SfBm

Score
10/10

Malware Config

Signatures

  • Trickbot family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5b41863edb6497db87dab02969ec7592_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections