Extracted

• • Target

    00098105f027bd4c4c632f7231125458_JC.exe

  • Size

    65KB

  • MD5

    00098105f027bd4c4c632f7231125458

  • SHA1

    d99a39f108e707699a65c606b5a2993797b532bc

  • SHA256

    61dd9fbcec77547dffeda9074e710063084fa69238c50740e8f8a31877936d3d

  • SHA512

    8a598a7dc668fe47972d4938f6bd25051e8e63070da93d9aa0451cc0e8223c40e437d7756f29fad1fc19c07c66c33cad94acb7352534106799e982520af98253

  • SSDEEP

    1536:ObQC21cKwuktNCBrm0siHq175tDBVpzRW6TwZQGvs:CQ0K/U0siHO9jV9UFs

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2