Overview

overview

10

Static

static

10

ded8fca103...18.exe

windows7-x64

3

ded8fca103...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

Errors

Reason
config extraction: Trickbot2019: trickbot: error pe: invalid address pe: invalid address

General

  • Target

    ded8fca10372eff1ffdd82e45efa5721_JaffaCakes118

  • Size

    100KB

  • MD5

    ded8fca10372eff1ffdd82e45efa5721

  • SHA1

    a568a6a751369f4a5a685d7ef2b75ba3dd5e3845

  • SHA256

    f228a84dea44324fb488c26c7e10782eb68b4835dc931f642489617551a6f0e2

  • SHA512

    59246cd8c29c05e1bc653953ce1d51e0fd3288e93ed58758cde5dd3b05d43f39bcfd57373473c4183c46c62ccf3bb535de4417bd2bfb9bb67ce3d0a5f8e5bdb5

  • SSDEEP

    3072:cJ6RiJq8tGcdmKTob5WubBJrBrGI3ZotjNfzm:O6Ri7Gc0KTob5lHrBkjNm

Score
10/10
trickbot

Malware Config

Signatures

  • Trickbot family
    trickbot
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ded8fca10372eff1ffdd82e45efa5721_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections