Extracted

• • Target

    766fe4ca2c1cdfd82931d1e6f9d795ba4c37f28635ff260145e18ac282161eac

  • Size

    122KB

  • MD5

    ef12b5b77fde7f38357ddd4bfe2f87c6

  • SHA1

    cc37132c456e616b74bafaeddd092001f4a68c4c

  • SHA256

    766fe4ca2c1cdfd82931d1e6f9d795ba4c37f28635ff260145e18ac282161eac

  • SHA512

    9a67b244a9c02e80db1bff0e14a4c9817a2596297c480ceffb398a8c03ec8d728669ec0d2648ba7b219634123b09a9bdb8645b87230c948ff90b594a7138c087

  • SSDEEP

    3072:F+QLFWoBpmnyaZkhEiOu5BCs62XQlDJ9r9BdDqeeCtt+XVWF:FbFVBpmnxqhEiOElXQd79BMNSt+FWF

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2