Extracted

• • Target

    JaffaCakes118_00b5a8f3ed9b37cd47626d0c3ef74180

  • Size

    24KB

  • MD5

    00b5a8f3ed9b37cd47626d0c3ef74180

  • SHA1

    842c45d6bcd3c3f716f18af3562a52d7de8042e3

  • SHA256

    799b7cf4e0fa42f9c7fc894271e9fcfd0b4be999ff51da56b41bca8d7d8b7584

  • SHA512

    d1c3c040c978c457a65b19f9ce9feeba1b285c89bc21ec11d98247ef16219da4fa7e1156d87675f6b487f0cefedba59a7d84436542f1dfa75678c4ac80d0d8eb

  • SSDEEP

    384:n52UcAW6a0WpSoXZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9PffPz:52UcAXtAQGPL4vzZq2o9W7GsxBbPr

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2