Extracted

• • Target

    f00a47b0af035d3f6f3afbe4ec6a03d9d041207ba2b478e4210c3e41b52f56ee

  • Size

    196KB

  • MD5

    a264b832bcf32228ab18a531217a1200

  • SHA1

    ba9ad5ef8c6f66e443063f8662413198f1ca5d43

  • SHA256

    f00a47b0af035d3f6f3afbe4ec6a03d9d041207ba2b478e4210c3e41b52f56ee

  • SHA512

    6dace4992b1b1ae232daaefe199c4a435de5291f32c9b5dbbd0aadddb814edbcd73e8a076b7b2cde5b7cdb6b9f0b7e0cd9b29e129dee0c57f11db1f00ffb9830

  • SSDEEP

    3072:psIRVMAuwsNMRQ3cqQgwtVU2+z+2lW5OVt4xzM6MCg1RCtynSeA4QpwRCdSR:7IAPs/mUs2ltVCJMj1RCtyhxQ2RC4

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2