Extracted

• • Target

    06a9db87676afe60f09d8b69252d65f3a5c2d86b508825465f8cbd43209f95cc

  • Size

    126KB

  • MD5

    0cfd6964cc4ba51a2c8d2aaa50035bef

  • SHA1

    1a5d0b7e4c6760f442be3a2374760f7942e1c229

  • SHA256

    06a9db87676afe60f09d8b69252d65f3a5c2d86b508825465f8cbd43209f95cc

  • SHA512

    9ca0e271e518095954ea55e92963fc7b0ff029f8d1edcdfd6bbb927b50f8288d58fc8907cb254c46267096ad11ac2fefffb6a3b78cd13a05cb5eb5472d87a01a

  • SSDEEP

    3072:qQI+RTXJPceAnJZMwDhDeWs/74Y/dZ8szhTzcOTr/a/dB:qWpmnJXDsEY1Z88hZ/a/P

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2