Extracted

• • Target

    JaffaCakes118_3e4e556b3cb8ab2b7855f1a142ff0422

  • Size

    26KB

  • MD5

    3e4e556b3cb8ab2b7855f1a142ff0422

  • SHA1

    f04f015e2f33e55ecbf37a31e67a486f5f400ce9

  • SHA256

    4d22a18c2e9e71904cdde2f9b56a060e82b2fda7f6a1d99319b8158508700779

  • SHA512

    8626c5acabf7128f563ea0a348c22fdc0dd1f999c37998396ce00f4c81a2e71b9dfb1bbfc1fe9ddfd8febbc15e37f8696f7b4eab22d20bec6107681afea1c688

  • SSDEEP

    768:Qd5u7mNGtyVfUyfQGPL4vzZq2oZ7GTx1RX:Qd5z/f14GCq2w7+

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2