Extracted

• • Target

    a53cf94a585446e7c695e4df416c31124a16223c8fe07900056e12e829564689

  • Size

    116KB

  • MD5

    01cbac42519baefab975d6c753bc7420

  • SHA1

    21be7bad4c16126f3a3db0007f94e7590452dffd

  • SHA256

    a53cf94a585446e7c695e4df416c31124a16223c8fe07900056e12e829564689

  • SHA512

    bc42458d5b38966f2aebf8a8500296337dfc1fa286856d62c5f3db906ca3a73fa9e146927b392f6fad5af564e4c4f154f1e6b16a16cf3466ff8d5abc6f63f97a

  • SSDEEP

    1536:P+xSa3vVwlQPolJGsSeKjQ1EYz0Ng/64xZUpSGUEI8OGRuHjys60EG:mX/QJGsA2ErNgy4x+SGTOAIjnZEG

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2