Extracted

• • Target

    11aabf29bc04677c9fa6ec5384d76b0ab9987783a66d462f3996965640ddd766

  • Size

    185KB

  • MD5

    a134a96deb4b7a91e192a3b184206260

  • SHA1

    5d1c2075bd35155f22304c2edb3e0ec15d369c64

  • SHA256

    11aabf29bc04677c9fa6ec5384d76b0ab9987783a66d462f3996965640ddd766

  • SHA512

    647e9cb5cf0f399315d17ca43d87a0b67e4ab6a6e72745f6df473f6416e7613386370390d870ae5daa522411cfceb60e606442572e913752cd14eb9cc2bf395a

  • SSDEEP

    3072:p0YgJeskAi8yxyvZcMO/6T4nIB5BAZlUSJIhZdsHt6WLGaqnh0B1ihW:p25fQAZcR/6TkINwlKZdChOnKB1iQ

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2