Extracted

• • Target

    JaffaCakes118_c9409dcdd35f34531c3a7e692b46be9ec74efc25d0cb8c322a099adfb95055ee

  • Size

    383KB

  • MD5

    4c1c1353d9ba6ccbb2c14f31b77c7a78

  • SHA1

    6bdfd8cdebd9455c4e8dec17d992764865b52c56

  • SHA256

    c9409dcdd35f34531c3a7e692b46be9ec74efc25d0cb8c322a099adfb95055ee

  • SHA512

    fef17d2dd8e96cf7abff922e8be0ddcc7ca2cb736aed76325b8e03b71eb22fd3f53551dca4cb83e272fbc4b85fb12796e118aa206a6ae36c3d49846f63844177

  • SSDEEP

    6144:++E1M63eDwShxpZWqipaOkBI2KbQBL3XjpuzbgwuO0RikwVfT:1Ei63eDwQX7ipaJB1GcL3tunnwR

  Score

  10^/10

  amadeyd00855discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2