Extracted

• • Target

    ffc594d0b80a3a8eef01e59d7f37e0e8

  • Size

    100KB

  • MD5

    ffc594d0b80a3a8eef01e59d7f37e0e8

  • SHA1

    c9f19aa195ebdc0896b30397ad8e0d31ecaff766

  • SHA256

    8f305ead63c5f128f9b07e8273415483efbade1f3504ecd042fa30f2bcd86f4a

  • SHA512

    c3afbfa54dfcc9d003723f69a177422732073ab0fbd88e03c99929547ffe990e3a97f554ba4c4f78dee355a7b711c78ab00c2e8ea6cc6f14cfa5d78eaa076007

  • SSDEEP

    3072:1MotEHuljbZobhyjob0SAzw5MVPiZMB5ZGVV8c6:1TtRH+bQ0b9Azw5Mc6rZW8

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2