Extracted

• • Target

    01d8c5b2ce48c6a9de2270265949b052

  • Size

    100KB

  • MD5

    01d8c5b2ce48c6a9de2270265949b052

  • SHA1

    c71c1cea4d756f4c5eb13851f733e56856d22630

  • SHA256

    a68de65e2c9a3e4064307d1dac542660b9e7bbb9c1874807bdf250eee3377881

  • SHA512

    bb703894d4d0a7c72675aaa796b7888bcefc2214bec98e069116a708110734b0488b6a1b9e58a047f9a657385740eb5272b057d58a4f5b23fbba612368e720a9

  • SSDEEP

    1536:gCKtMurrphCHcYL9i25h2ZnrdyzhoaqFu66O6Kb4t8y7Dmi1C6Qnl:aSurzC8OsvZnRyzhViI+YBKuC

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2