Errors

Reason
config extraction: Trickbot2019: trickbot: error pe: invalid address pe: invalid address

General

  • Target

    94bae111661aa4fa57e097a8303aa4ab_JaffaCakes118

  • Size

    100KB

  • MD5

    94bae111661aa4fa57e097a8303aa4ab

  • SHA1

    672fae590206a6aacb884c3531541076c51e063a

  • SHA256

    99735c4a330d80918982b17439527f45a296cf8eadbed9a357f797cc6a80e895

  • SHA512

    84912a88f20c3121cbe502f52f4828005c984eb90c1f271dfd38601a2057d6619bf9bea4c67e0536edbae82de23841dc3ad201dee087c5901dc0bc17b785fa22

  • SSDEEP

    3072:oVSk8eNW2ZyKTKbxy2FBB3Z73eIRZwfJnzm:GSkBW2EKTKbxfBpZ7SfBm

Score
10/10

Malware Config

Signatures

  • Trickbot family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 94bae111661aa4fa57e097a8303aa4ab_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections