Errors

Reason
config extraction: Trickbot2019: trickbot: error pe: invalid address pe: invalid address

General

  • Target

    baa4f8b3a2b95842f591d20992bc0879_JaffaCakes118

  • Size

    121KB

  • MD5

    baa4f8b3a2b95842f591d20992bc0879

  • SHA1

    ea4ee1ac3a5d670b9f39e198c5aa6480bde02e03

  • SHA256

    36ddae1d456b43ee47c829836789c063ffd9c554ebc72c19b08325eb78eae258

  • SHA512

    a758451177fa931c6e4d2495c101a16ce32edb38a82673a35bb2971d7e471710181adb6b9ef7080f824bc1488abbddd88c400cacf7cd41aaa1acbac48b0cbe3a

  • SSDEEP

    3072:ZKEaszxgje06HvSKPNSFfNh85MUl0ghu3OW:ZKtszxYXxfNhYHlhA3O

Score
10/10

Malware Config

Signatures

  • Trickbot family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • baa4f8b3a2b95842f591d20992bc0879_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections