Extracted

• • Target

    780056a666002722a4dd72406837b1174f55512f630bc665f90d40036425cce1

  • Size

    335KB

  • MD5

    401410464c72678b67698e4b8bead7c0

  • SHA1

    d3beef401b521b0f2ed896893f230a45fbefce99

  • SHA256

    780056a666002722a4dd72406837b1174f55512f630bc665f90d40036425cce1

  • SHA512

    8d92bb1d2c453c3c5e9352502b3907c5b82b56e75591a8c78e602185fc3ceabf4bf0efebae46b22992d0c9ac6942f72d250612feae9b9b3a41f3065e3a70952c

  • SSDEEP

    6144:BmKX9F8w+g1MZOe9ubCxL55OhZGgGzdJPDVUGHz8s2F:BmKX9F8GGOekQL5SZGgYPPxUFs

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2