Extracted

• • Target
    b277141c357912e3cf76cf2eff36d2d9.exe
  • Size 2.9MB
  • SHA256 f3dda8f48606c448d22a7b407f61757605acc028d3deddd0ad8c1e2742efcf86
  • MD5 b277141c357912e3cf76cf2eff36d2d9
  • SHA1 dfee214eec9da65da55ce47f44ccb0ae4751195e
  • SHA512 11aad22541baeeb19f54b306b3719da789287ce5ad2aec9218c2b305b69d4bd8fe794063fab761ce5f90a02ffb506ed9b2431966a2e9aa605647508f5326159b
  • MD5 SHA1 SHA512

  Score

  10^/10

  evasiontrojansalitybackdoorupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2