Errors

Reason
config extraction: Trickbot2019: trickbot: error pe: invalid address pe: invalid address

General

  • Target

    f493c8744fb3b8c8c18b671a9cdc8cee_JaffaCakes118

  • Size

    100KB

  • MD5

    f493c8744fb3b8c8c18b671a9cdc8cee

  • SHA1

    34f5122a5cedb730e29ab2be0b00545a30364fa1

  • SHA256

    71e08216450297739c29940820b3cd24c8b40ec476c0a26cb251cd119b0a498b

  • SHA512

    edf1db85299e4caa591e0ecd5ea6477f729096acdb614fad54062f1c95bf1a0099daa152f383d4e47d8a2155f4033478f9b3b339c26bd9e745bf846ca700cbd2

  • SSDEEP

    3072:uBiWYPxyDn6S4Kx/broWJVpzasExaIwMKY0QVTzmP:giW+yDCKx/brBT2sEB30QRmP

Score
10/10

Malware Config

Signatures

  • Trickbot family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f493c8744fb3b8c8c18b671a9cdc8cee_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections