Extracted

• • Target

    797dfb92f5e441f358e4af64b008a218df888e988337ab4bfb034fcb8a7b0139

  • Size

    198KB

  • MD5

    61f2cadc496ad22bc7f79937dc98a330

  • SHA1

    389534b08bd930cfa7c67ab23cdcad875f1d1bcd

  • SHA256

    797dfb92f5e441f358e4af64b008a218df888e988337ab4bfb034fcb8a7b0139

  • SHA512

    f054544b52d54b5199e057d41633e06cc5ebbc26cb26cd7ad2672f7c507adb28ced68a0b6b96252f575817f406643ba599b93867d2b373775f7843ade3a44941

  • SSDEEP

    6144:Nf7YeyUpc3VizWUk6wm4ki1jbC9BzUDDW/zvW:NaUpc3Vpl+iuzUHWLe

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2