Overview

overview

10

Static

static

10

78978466c4...18.exe

windows7-x64

3

78978466c4...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

Errors

Reason
config extraction: Trickbot2019: trickbot: error pe: invalid address pe: invalid address

General

  • Target

    78978466c4a10bc9237dc5c71328077e_JaffaCakes118

  • Size

    100KB

  • MD5

    78978466c4a10bc9237dc5c71328077e

  • SHA1

    b8aab316d941427d1d1d5c7f1690853a91806fda

  • SHA256

    39f08256cdd2408ba547aa48ab094c6010bc94723d4a02383cf39710902539d3

  • SHA512

    9add082f1ccc6e3538596a7a583fac296ba904eccb1e636c01e8d82959079785381e2b4ed0901a79e80ae8908e757b83dc6e9b6e03639c1d62be8b3bd8459a3f

  • SSDEEP

    3072:oVSk8eNW2ZyKTKbxy2FBB3Z73eIRZwfJnzm:GSkBW2EKTKbxfBpZ7SfBm

Score
10/10
trickbot

Malware Config

Signatures

  • Trickbot family
    trickbot
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 78978466c4a10bc9237dc5c71328077e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections