Errors

Reason
config extraction: Trickbot2019: trickbot: error pe: invalid address pe: invalid address

General

  • Target

    9079c19c697738b90a5e54f0844bc242_JaffaCakes118

  • Size

    100KB

  • MD5

    9079c19c697738b90a5e54f0844bc242

  • SHA1

    f5fa36c074b04c5fb68a9345a2681e819fb039be

  • SHA256

    ae6e5a63ae6abcc5b8a5f4e4005f24b63f41d102d4a7f87ccf34724d8667827e

  • SHA512

    531c51802e48cb2dfebbde85716c753e1c327ba23640f143ab8a7972792669c32116f87c8f157c803ac7377df0759cf6e4b06559618eb735c479a2b73d4a2fb4

  • SSDEEP

    3072:ybpKFay50dm0tmKzwbpWuLxh1ZJbWIvpQqQdfzm:OKFaTm0kKzwbplf1ZJcDtm

Score
10/10

Malware Config

Signatures

  • Trickbot family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9079c19c697738b90a5e54f0844bc242_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections