Extracted

• • Target

    3b6b29a5381854b2e9ab537facde6cd4b2c62ddf4a8beee97e297526c1ce8792

  • Size

    216KB

  • MD5

    2698b6154cbbc3c849dea5e802b215ab

  • SHA1

    b793e8393bace59c15afc215753115556c439b47

  • SHA256

    3b6b29a5381854b2e9ab537facde6cd4b2c62ddf4a8beee97e297526c1ce8792

  • SHA512

    56b9836a3dae7221e63f0794ad99c01ade441c1f6816339cec65cde9d9f43265e9b904c20cf39bef34172650660860fd5411cc3e766ebe509abb8c4af24c001f

  • SSDEEP

    3072:/YgJeseiglPZ1yxyvZcMO/6T4nIB5B3U3qpWH+ngODQYHa3IJ:t5eplxAAZcR/6TkINaH+da3I

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2