Extracted

• • Target

    f45421538ece6be6fe8bee9a4ab0c6d8354209b7e8fffff47745a46d4cc13456

  • Size

    96KB

  • MD5

    3b18fefa35cdeb7759b4c31eaf90ee01

  • SHA1

    a977bf4e1dcab474d8125b6f8582096aaa3bed5f

  • SHA256

    f45421538ece6be6fe8bee9a4ab0c6d8354209b7e8fffff47745a46d4cc13456

  • SHA512

    894a95577e23a59880e6bba2792cec5e80f4f35c3072886d25941387a1364881b9b02af3d9e1cb48a61d81e4a8ca7cf797e04fbe0c0713a1187946af4dc57b7f

  • SSDEEP

    1536:71oA0Q1pqBD8lfWMVymdf20jTg00O37Mol8cckGX:R5jqBD8lfWMVVR20nbrm5HX

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2