Errors

Reason
config extraction: Trickbot2019: trickbot: error pe: invalid address pe: invalid address

General

  • Target

    fc9cf854773695f50cfe03e2f310a3d0_JaffaCakes118

  • Size

    100KB

  • MD5

    fc9cf854773695f50cfe03e2f310a3d0

  • SHA1

    bce8e9ceec17ed3ad72bc55a585fdb299ca4d035

  • SHA256

    187e1a7b779a4a1a38674b4bd2b8623d4125bcdfa9b1b9adc2349fd7a8866d23

  • SHA512

    fd93175825f032e3a29ffcc108d2184bd3a5fd1a505d03c1eb2565804b20cededa69d92765b3e717910e49a70cafc65d4892a1607eda0480471dc4073010312f

  • SSDEEP

    3072:oVSk8eNW2ZyKTKbxy2FBB3Z73eIRZwfJnzm:GSkBW2EKTKbxfBpZ7SfBm

Score
10/10

Malware Config

Signatures

  • Trickbot family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fc9cf854773695f50cfe03e2f310a3d0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections