Overview

overview

10

Static

static

10

d99398082e...18.exe

windows7-x64

3

d99398082e...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

Errors

Reason
config extraction: Trickbot2019: trickbot: error pe: invalid address pe: invalid address

General

  • Target

    d99398082ed3bfdc0568c4a757b75892_JaffaCakes118

  • Size

    100KB

  • MD5

    d99398082ed3bfdc0568c4a757b75892

  • SHA1

    77514b34d04f1e0f90af08f611bc8d729f3abffd

  • SHA256

    4355a55a5698c3518327003dcb66d3b885d856445042c93027c3a98c963336c3

  • SHA512

    4c74df67dcf020347985b5bee60299a76e43f2ca0f4000637ce87da0e75a80259b89bc861644a58c211f0f140b863e9b3247286296229b0075633c84e2dd439f

  • SSDEEP

    1536:WuX3+RDckqNMPmeuhat9TqfUby151ICp8XrgsbVtfoOK+0dWnIkzjqngB22lTPPE:WE3cWNHhatpKhp8bgsXKPHLfOL93Ru

Score
10/10
trickbot

Malware Config

Signatures

  • Trickbot family
    trickbot
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d99398082ed3bfdc0568c4a757b75892_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections