Extracted

• • Target

    13b4293f005672968a3a9fb5a13f83bf

  • Size

    127KB

  • MD5

    13b4293f005672968a3a9fb5a13f83bf

  • SHA1

    766c1eff0197143a3541d0cb21f6c7f5aef82a96

  • SHA256

    009fd8571caf72728fd6c191043bcb63952afdb9d65cd935637297f542f7218e

  • SHA512

    09de181de793cf9982abd84d20f0e2971902e0684b5b29cdba3eac819c578cf92de15a4739a74d79d5eaf75a1dc5d38e43ce3eba7a10a09b9218be173d354b88

  • SSDEEP

    3072:/OxfaA2nWJ7hus1J5jlDYF60dZQyf7Cmm0j0K1kEY:/OTdBWY0pf270vkj

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2