Extracted

• • Target

    d3d999accaecc53680b195bfd07a980db569ad7d7cc42b8e134f7b05198a3e1f

  • Size

    206KB

  • MD5

    7fc3b83bba6133e81eb32f47b94a16b9

  • SHA1

    9f85be4839418305b19240997cdf31a1ed2142aa

  • SHA256

    d3d999accaecc53680b195bfd07a980db569ad7d7cc42b8e134f7b05198a3e1f

  • SHA512

    8456a6bdee28c5b3fe4df979fb1037a84b2fde39af27e161601791ab14e17820fbaceb8c28589e1fad28716e3e00ab1a17237b977a8175ea4438bbadd5959405

  • SSDEEP

    3072:eiOGGUTk4x0/4cbo8gtfMKDMztHpitaWOauN3sfdJtnjA:0kfxtfbMVwt+auNoJx

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2