Overview

overview

10

Static

static

10

d6ef6a31e9...18.exe

windows7-x64

3

d6ef6a31e9...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

Errors

Reason
config extraction: Trickbot2019: trickbot: error pe: invalid address pe: invalid address

General

  • Target

    d6ef6a31e908c9e6de809d5463fa4e84_JaffaCakes118

  • Size

    121KB

  • MD5

    d6ef6a31e908c9e6de809d5463fa4e84

  • SHA1

    cb28f4a1b010580ae988ba2a3797b9be1e2760dd

  • SHA256

    cc07072868e3f65355d21c4e1e09e287f037e88976228870ec5c407ae9dceebb

  • SHA512

    aa0c389c0ad5058b0232d8effd6a7f715de50043440b6328d5507ca2b199d873765244beab713ccd5492749bf3616b29493233c584a6342ae9411930ea757426

  • SSDEEP

    3072:jKAAcFJA/E0UVveiXjGFvf8MWvCQxgqVk:jKjcFJkdbvfwbxr

Score
10/10
trickbot

Malware Config

Signatures

  • Trickbot family
    trickbot
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d6ef6a31e908c9e6de809d5463fa4e84_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections