Extracted

• • Target

    JaffaCakes118_68c62a0deee0c92e6924d02fbc8f2870

  • Size

    194KB

  • MD5

    68c62a0deee0c92e6924d02fbc8f2870

  • SHA1

    d744ddb293f70d438d9d7f3ba17e2e161d5ff376

  • SHA256

    04ee9f165c2cb81d98543afaad6f7b640f106a564eb88c8218588e0cb8135d65

  • SHA512

    3f1da4a9d46899a4ec874331a7144f6efef9743859be8a937f54c220c94062c2b3faebbf0d93f8b84debd0a48eed2641e00e879c026c4d866c69b6f95b463383

  • SSDEEP

    3072:StxaKF9F9dsnwsOduPCWf6mo1t0KkckqFOqXBCIShmi1K/0G8rpUnmOj7GCH:tC9+n9ufigpkqhBCIShmi13umj

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2