Overview

overview

10

Static

static

10

65e6f95d49...18.exe

windows7-x64

3

65e6f95d49...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

Errors

Reason
config extraction: Trickbot2019: trickbot: error pe: invalid address pe: invalid address

General

  • Target

    65e6f95d49980adaca90daefb174bc61_JaffaCakes118

  • Size

    100KB

  • MD5

    65e6f95d49980adaca90daefb174bc61

  • SHA1

    27244762a5d46c401e1c816ff4714804515742fa

  • SHA256

    384f762c87f57871f07be66c73cdaa936f38b5ec3c029c39d724be5c6b6684a7

  • SHA512

    9d318f6faa537aa5ed1d1cdfb5c52b6a454f6c2c453f59810dca1b47b208f193a4394a12c73f5df28ef804d3c1980f2075a527ef1ad62e0bb1489bf9088556a2

  • SSDEEP

    3072:8paIEMtGs9GKzYbZ2uTEKBZ7RrGIHZQjN/zm:uaILGs0KzYbZxEK37RUjtm

Score
10/10
trickbot

Malware Config

Signatures

  • Trickbot family
    trickbot
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 65e6f95d49980adaca90daefb174bc61_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections