Extracted

• • Target

    NEAS.46a81a11f7d36c2d8dc5ed9a6182ccc0.exe

  • Size

    154KB

  • MD5

    46a81a11f7d36c2d8dc5ed9a6182ccc0

  • SHA1

    93d30d837390c8d84ee8563679e7f938f6b21114

  • SHA256

    c8411eb54a344a989a6ab71a27309f911267b410f39bb1208b1313bfd44893dd

  • SHA512

    46c73e815a52ff55fe26dbb038d29d8d7ea976d3712b85729e15fe1aefb7558d083eccafb909942508b1670f909d317473213876d7fd0c03912aca68bdc4304e

  • SSDEEP

    3072:8D4JlU3G9inroLloqC+LwWWSJjRgYuOZVRRM:gnqS5+LwhSnsOfRRM

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2