Extracted

• • Target

    JaffaCakes118_56b248c90d790a165ea61624192df350

  • Size

    376KB

  • MD5

    56b248c90d790a165ea61624192df350

  • SHA1

    f8be168391ae112e5b0b3959a6d90ae0af48b28b

  • SHA256

    ceb59953208e39ed578e4b561fda9f6fe3f08dff98a47ac8ba7e76a2818d10fb

  • SHA512

    ea2a555cbad569393ae9ebdb3b8a083b0678ba011a85863e5b9917d6a782e18d19752c1d93ecd715f5748578026c6f1d9a86add7863801944be3ed970e0e7569

  • SSDEEP

    6144:KMn2qDIj5+fhWL+o6ImyAOXCCRXzihMBjF6WnMDBwq6Ng6caLNEEWEuE3OnDL9+:Kw2qD65rr6ImyxCCNihMBjF6WnMDBwq3

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2