Errors

Reason
config extraction: Trickbot2019: trickbot: error pe: invalid address pe: invalid address

General

  • Target

    e0e4a157c40d1a988b2a29b556fed914_JaffaCakes118

  • Size

    100KB

  • MD5

    e0e4a157c40d1a988b2a29b556fed914

  • SHA1

    feddf2b1c454870f5f42f4c02260dbf852f6b103

  • SHA256

    e5f35e4403115ef79d389762d065462616838d7f5a82a12409c34af1255fc103

  • SHA512

    78d8fa839d90306be22ac719e9118907bbf595dc3101c50ff31cabc9da525c701405a0cc55c338138b5c865fdcfaa48ba442e54893a3a9e071d8f29dc0ba2218

  • SSDEEP

    3072:oVSk8eNW2ZyKTKbxy2FBB3Z73eIRZwfJnzm:GSkBW2EKTKbxfBpZ7SfBm

Score
10/10

Malware Config

Signatures

  • Trickbot family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e0e4a157c40d1a988b2a29b556fed914_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections