Extracted

• • Target

    JaffaCakes118_41b8324363a8a3c0e33e5fb84160a280

  • Size

    152KB

  • MD5

    41b8324363a8a3c0e33e5fb84160a280

  • SHA1

    63e28db081d5a16285cee27e30111c3ce900c285

  • SHA256

    bdbf176fb6c381086f0b2b67612afeb7810850025444e2462d0e46651e2fa503

  • SHA512

    cd7f5cdb2518f421aecc33d84e66399999656ff6b8596e1efbae11038966e47dc12193cc2cc515e4d38e0c969cd6bf4ab31e793db5f9a3127c2c7dbf99843df6

  • SSDEEP

    1536:KY7M1MhLDhw83WsK2SDJjmXazGgqBS6Z5OfGCq2iW7z:KVShwjsKb1mZggsGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2