Extracted

• • Target

    c94714e47f8314921b0934edd25666eca9306a5069509b0ddea27a6b321279c2

  • Size

    124KB

  • MD5

    17d75755ef82abb45e4b322a5b7b25ff

  • SHA1

    7b01aa3eca583b15c98f95cd4bfae5980deec166

  • SHA256

    c94714e47f8314921b0934edd25666eca9306a5069509b0ddea27a6b321279c2

  • SHA512

    619c1f54fc7d20d9ee29e95aba2e25c451e9a9d2dd04b3f0006c7db429fd415151f57ac89070e9b79ee92da144ae0c95f4c1f847f52a9ffca308d71f385a66bc

  • SSDEEP

    1536:jsbxymIKT4FGeTIBpgrTo5C24q12BJVoPeXfNEUAl5xCakurkOR5ijBUbM8TfsFl:obxypeGdPqQiIbomXf+jlrkqKGIwfsFl

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2