Errors

Reason
config extraction: Trickbot2019: trickbot: error pe: invalid address pe: invalid address

General

  • Target

    86879c6f4eca1895f5ac396ef92e8282_JaffaCakes118

  • Size

    128KB

  • MD5

    86879c6f4eca1895f5ac396ef92e8282

  • SHA1

    b66290fb47c603817709927659695f6a5d160e00

  • SHA256

    8abfa6c78b330176e6dbe9698de76d776856e06c8ef353de362787b5dc660e9a

  • SHA512

    fbf3a52346bac43256d06cfeb12705d54f709ed6837fb83d6f6daf7a5039f020bbb33b1ce87612d2fb0aafdd7e9c119bff2389f3399788b88d1542af50eb2587

  • SSDEEP

    3072:CCNuKhK92mtnMDmxCdh46w5zQLoGGl6d:CnAK9hM6xI1LDGY

Score
10/10

Malware Config

Signatures

  • Trickbot family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 86879c6f4eca1895f5ac396ef92e8282_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections