Errors

Reason
config extraction: Trickbot2019: trickbot: error pe: invalid address pe: invalid address

General

  • Target

    fc73a98144f9494b4679c50b9afa8bac_JaffaCakes118

  • Size

    118KB

  • MD5

    fc73a98144f9494b4679c50b9afa8bac

  • SHA1

    1a14ba9e87c72b65c6c718c5b7bc4e9fbdc3a82b

  • SHA256

    c24ccbe82cce59660eac10ee4a0aa4fcbb74167b961ae0952ce87158a5415a3a

  • SHA512

    9710e5c90b49fe4930bd0d5cef234bc867dbe296e76df69863c932b0448f76896acac142ca4cddbea93fa53b61613c5f0d8f3283054c06bd91acadfd43f726d9

  • SSDEEP

    3072:ufD9nPElKH1eNzFAjTFAszkrIpXZJptDBKb1SXD:K9nBH1eNzanOszkrIpLVKbcz

Score
10/10

Malware Config

Signatures

  • Trickbot family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fc73a98144f9494b4679c50b9afa8bac_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections