Extracted

• • Target

    JaffaCakes118_64a522cf5e1c954c0cd4a3bbf2c5ef00

  • Size

    401KB

  • MD5

    64a522cf5e1c954c0cd4a3bbf2c5ef00

  • SHA1

    b1b72dd79ead97b063669049a71304bf8e4f6d7d

  • SHA256

    c90c58cfb4a7f0d53180d42afb12857a1ee929b4a2d6597169f077a6da777065

  • SHA512

    a22a820b2df7bd6f1b1f30f461f428389c80ada6a176318a87c88fc49e2e960522fe402b0598c2f520ac3a2cb6f3c75ac7550e467d62f886b25cd6632b3db4f7

  • SSDEEP

    6144:rIEvrso5x+t9cXtPNDKsXDJV5CjLDX2Dde2ukOrA68PPJWFhTA7nBZngX1Li:rI9o3+jIlGszJVA2I9kOErUEBZ+

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2