Extracted

• • Target

    3fdb2c95a54175f5dfbfded3b20b2d8dc231c653862a6f5d4cda926aa89f4879

  • Size

    897KB

  • MD5

    632b336ef32552dafa0ed5e5c3cdb4c6

  • SHA1

    c6ea5f29e71e4a2300876619eb7e833a56417fbc

  • SHA256

    3fdb2c95a54175f5dfbfded3b20b2d8dc231c653862a6f5d4cda926aa89f4879

  • SHA512

    ed41ca53572fb7a437391e3ad4fab0eb483247b7363141ab9953a85956e140a0f8ee9e6544c3d293ac358b44b9df28c05057d599c56de6e85aee467ec8863ca4

  • SSDEEP

    12288:82vuNB6tIheNHzWp0lCnb5zM3FtqUeMH7WLrmzoGzoox6XrmDDPnE+vWWhOSoqUV:8CuNSWFIH7KkoGkoYrcDnJvWWYTltR

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2