Errors

Reason
config extraction: Trickbot2019: trickbot: error pe: invalid address pe: invalid address

General

  • Target

    fb2740c1ad6935d51d6eb07c238ac45a_JaffaCakes118

  • Size

    100KB

  • MD5

    fb2740c1ad6935d51d6eb07c238ac45a

  • SHA1

    ba14d05704e635a02e97bb0f75164a171bcee489

  • SHA256

    ae7310dbc66b4dea05cfdcfea23d6e99ad8c674dd24ed263fa60ad18f900eb99

  • SHA512

    9cf995e5abeb22f0f434e52a7a689a26e1645222cd9722929599c6f07a07d21be55e51978a007ca07b3f9aee581d3bd5f1b037380daac45dd907a9a3790357c7

  • SSDEEP

    3072:oVSk8eNW2ZyKTKbxy2FBB3Z73eIRZwfJnzm:GSkBW2EKTKbxfBpZ7SfBm

Score
10/10

Malware Config

Signatures

  • Trickbot family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fb2740c1ad6935d51d6eb07c238ac45a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections