Extracted

• • Target

    d45183984ced6cf63cd45e9309fbcf694e2b7285bc2bf2801b16e6e1d58d3a20

  • Size

    881KB

  • MD5

    2b6a428746eec8490f68892900f85ad0

  • SHA1

    14413fd0ac482669d016de0a182e8a27b54510f4

  • SHA256

    d45183984ced6cf63cd45e9309fbcf694e2b7285bc2bf2801b16e6e1d58d3a20

  • SHA512

    38fd723cbbf7cf9cd03aa1b8a68f42abea09272dc0a503583e6d67b7fe8b883e6b535a0c7395da350e5f90aa1bfac5e67de9daedfa58cb06c1c434216dfa101b

  • SSDEEP

    12288:OZl6/yg1gdfRTOUi3b1fqGe5i3Hkm3mpFB+jSj7aQDT+J11xNc9vQGjV1MPXFkbW:OYsreeT+jOjGDju93jL0X4W

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2