Extracted

• • Target

    JaffaCakes118_680abe251f550f964796474d9af501a0

  • Size

    164KB

  • MD5

    680abe251f550f964796474d9af501a0

  • SHA1

    c8a5dffad8c97ddb20a64f3def2719e9113d8157

  • SHA256

    51a038ee36d6f763369da1566417dc0831ef0a983b12b3338f10376809ed3c86

  • SHA512

    e16cd8c616cd08c0d1dc130c4ffa7339c221631c6efd0c1b8ece88df1479560e39f986aac0436d0bb172ca61ef1ef79ee08daae2e12c2057099aaf3cd9094e8e

  • SSDEEP

    3072:u2sRnKDqxaGxDazNUOjXQ2Ar1OhmuBKxQkAep6mIpcfioGjfGCH:qLwGxDvOjrAxqp4p6Bqp

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2