Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
Ministry of Health Kingdom of Bahrain.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_d3f0200fcc0bce4cf561cb2755d6a16b4106465e1bd8d14a8b320f7a3708cac9
-
Size
338KB
-
MD5
9747a8c2dcbebf2c4d9ce40749e8dda4
-
SHA1
c474adec19333b76b838bce0be5d8d8ed39f94db
-
SHA256
d3f0200fcc0bce4cf561cb2755d6a16b4106465e1bd8d14a8b320f7a3708cac9
-
SHA512
b4d2db00d07a7c437633df33b326513b7265cfa1874668500e41b06cfc4765ab0489e0dce1b1d780404b5a18328067cf5eebdd94a2218d376bb0c3285be34a37
-
SSDEEP
6144:ildxjAX1PAxH+0JSJX/soagPC2UYB1AOrATuz0y38bIS0VGfkwHaV32XRReE:ipjAFPQH+mSJ37BrcAh3+Mw68CE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Ministry of Health Kingdom of Bahrain.exe
Files
-
JaffaCakes118_d3f0200fcc0bce4cf561cb2755d6a16b4106465e1bd8d14a8b320f7a3708cac9.rar
-
Ministry of Health Kingdom of Bahrain.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 356KB - Virtual size: 355KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ