Extracted

• • Target

    JaffaCakes118_6d6aa8057e3b81cebeb127446cd011f0

  • Size

    216KB

  • MD5

    6d6aa8057e3b81cebeb127446cd011f0

  • SHA1

    7cf4cab7454827e39898c57dece2dfe13fa60de5

  • SHA256

    197b9c863aa28fdafc1168907c5e363a9dfbecad322c13ec149e0a5fb98a90ef

  • SHA512

    49b8ca24c8e9d1fdcc4cb11c0977b555f5db9b9a2e8286d9b170b485a90692a7e3e29c9b244f049408216e0767cea2ebc19f464be9109025dd1560b6e6141a05

  • SSDEEP

    3072:ol3qOf+5or1QcMgmST9F+bAsOekqMhOdFAeRV8HDO4O2Vurl3dQuGCH:dOf+5UpMdkF+8sOKmw+eR8kFdo

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2