trickbot | 78978466c4a10bc9237dc5c71328077e_JaffaCakes118

Reason

config extraction: Trickbot2019: trickbot: error pe: invalid address pe: invalid address

General

Target
78978466c4a10bc9237dc5c71328077e_JaffaCakes118
Size 100KB
Sample240527-ktxj2afb79
SHA256 39f08256cdd2408ba547aa48ab094c6010bc94723d4a02383cf39710902539d3
MD5 78978466c4a10bc9237dc5c71328077e
SHA1 b8aab316d941427d1d1d5c7f1690853a91806fda
SHA512 9add082f1ccc6e3538596a7a583fac296ba904eccb1e636c01e8d82959079785381e2b4ed0901a79e80ae8908e757b83dc6e9b6e03639c1d62be8b3bd8459a3f
SSDEEP 3072:oVSk8eNW2ZyKTKbxy2FBB3Z73eIRZwfJnzm:GSkBW2EKTKbxfBpZ7SfBm
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

trickbot

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78978466c4a10bc9237dc5c71328077e_JaffaCakes118

SHA256 39f08256cdd2408ba547aa48ab094c6010bc94723d4a02383cf39710902539d3
MD5 78978466c4a10bc9237dc5c71328077e
SHA1 b8aab316d941427d1d1d5c7f1690853a91806fda
SHA512 9add082f1ccc6e3538596a7a583fac296ba904eccb1e636c01e8d82959079785381e2b4ed0901a79e80ae8908e757b83dc6e9b6e03639c1d62be8b3bd8459a3f
SSDEEP 3072:oVSk8eNW2ZyKTKbxy2FBB3Z73eIRZwfJnzm:GSkBW2EKTKbxfBpZ7SfBm
MD5 SHA1 SHA512 SSDEEP

Minor OS version

0

Major OS version

4

Entry point

60064

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths