Extracted

• • Target

    JaffaCakes118_6a4d9da58e77bfcc0a29c2005f6f4d10

  • Size

    583KB

  • MD5

    6a4d9da58e77bfcc0a29c2005f6f4d10

  • SHA1

    0ac0130463faa523d1855fafa1ba6011159c00e2

  • SHA256

    d9c82ca8aff109ea72072c57e3e03c5f8401c14d01ec4ae4cbcad35920ca9347

  • SHA512

    12dc75c0f18efeeecd37245939bbcd852a804cb53ce038c0bd11e37666da89cb9703759188271ef1cdd2b6e40b20e189f8823378e1cebbcbe6fc76e544f90fc5

  • SSDEEP

    12288:ZgCYxPVQ1KRLLIyDASbumfbKFsdrojwSzunLEjzaQ/K1V+qr:ZgCYQ1LGum4sx8Kofd/uV+w

  Score

  10^/10

  bdaejecaspackv2backdoordiscoveryupx

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2