Extracted

• • Target

    6d146e28553052f7a1385013d61ffa146d438994c8680d7df3d1ec2c3d5ba752

  • Size

    354KB

  • MD5

    088929e929ee9ea6985aab4be323b840

  • SHA1

    6dec6ae47a979ff1e4048eadf1acc488174a70b9

  • SHA256

    6d146e28553052f7a1385013d61ffa146d438994c8680d7df3d1ec2c3d5ba752

  • SHA512

    10d6e68aed9807f4b6ae85985d5fc945cab844de5c431a112e956e73761d0b562ef2555b41991e96ba606c4fc07db051b234fe9cc9b6e3899479503d3f0e5f7d

  • SSDEEP

    6144:fUpueYFCB7jdUSbRf2rIAsm7eV+wGrFA1PLb:fUpuerxwrGqeVTGrFA1zb

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2