Extracted

• • Target

    NEAS.19e71e87f9b2c9fed8313916647ccc10.exe

  • Size

    486KB

  • MD5

    19e71e87f9b2c9fed8313916647ccc10

  • SHA1

    2c49282d5f06060c014f06724888eb9bd2f2c5d8

  • SHA256

    b35288202c29b6fa479fddc57513057bbfae7690b565d16855783b1a833ca5d7

  • SHA512

    fc51554a7108c084539aeea994b7b1e12e3d7382b1faab56a3c2bda8dfc44fe9cb413b8a76d636985713b56a3457c50323c785cb0835cd5b924958eccccd26d8

  • SSDEEP

    6144:TitfYa0luXelkywq62kx7SbSLak+QAy/W4LxNCoZA9H8Er13C6G:Tittjyw9x7SWLL+ILXCbQ6G

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2