Errors

Reason
config extraction: Trickbot2019: trickbot: error pe: invalid address pe: invalid address

General

  • Target

    bf61c547cdb6321b9a069e849a4a0307_JaffaCakes118

  • Size

    100KB

  • MD5

    bf61c547cdb6321b9a069e849a4a0307

  • SHA1

    58d19f93196a0971f889943ced8321ab358d008b

  • SHA256

    8bbe6e403d8fd1a8086ffdd3088bc097ed5e3b5c3690d9f766bab6da1e7ca9ba

  • SHA512

    e86a2899f274efbe733e260ef95944f4e5013cd1bf48923f8f194631cebaa3300a92ecc82f594c6b05d8f1db639e7f971b54880379eea8f93a2af1fe2a73a176

  • SSDEEP

    3072:8paIEMtGs9GKzYbZ2uTEKBZ7RrGIHZQjN/zm:uaILGs0KzYbZxEK37RUjtm

Score
10/10

Malware Config

Signatures

  • Trickbot family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bf61c547cdb6321b9a069e849a4a0307_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections