Extracted

• • Target

    JaffaCakes118_59a76b09b6c36f634d66d136ec992920

  • Size

    228KB

  • MD5

    59a76b09b6c36f634d66d136ec992920

  • SHA1

    5e2a4619f4c345ea0cf1f8529ec310b149350f61

  • SHA256

    6e8d1cc0e908f5c354030136178268bebf38321e05e666f36584f5204652b82f

  • SHA512

    0911c66a848833915ad66262c8d0cc17b34f069a184ed25898b2f54fd252970d9bf1fdbbfcbc02d9106ebc5b6c034493b5cae54cf85f22ed86fb6fce2040aac3

  • SSDEEP

    3072:mWMqtGfP6QSWqi3epGLcDN6tfxS6yVl48vdc+p3WyZT2Wno4hJ4JFjOIwGCH:mWVmLqi3JQDN6xxbycqDKJFt

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2