Errors

Reason
config extraction: Trickbot2019: trickbot: error pe: invalid address pe: invalid address

General

  • Target

    60f697e108c7adedcebc3600a89c886d_JaffaCakes118

  • Size

    120KB

  • MD5

    60f697e108c7adedcebc3600a89c886d

  • SHA1

    97ba989e41459bf336a455defea210f4ae90d1bc

  • SHA256

    67204b283d826ad27b8ce2d5a97058d5b99bc07865581e6701b118c4e8f9acd0

  • SHA512

    7aeb61a3911ed988a1d571e06c37c1687ce1fffd1d8614d443af75abc0eb9ac4d0587438e49aac4e94ea81fc6b95bc9f5a656b694efece0a3d7387176a793079

  • SSDEEP

    3072:1JDLlzKwMZS5jIwcOnwwcJogyAUU4JQbH8zlf5paZOfa8:1JBKwnjIwcOwwc+gNdaaZOt

Score
10/10

Malware Config

Signatures

  • Trickbot family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 60f697e108c7adedcebc3600a89c886d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections