Extracted

• • Target

    393aa9a0486595aca561e46b9448bb11

  • Size

    665KB

  • MD5

    393aa9a0486595aca561e46b9448bb11

  • SHA1

    b4ef143b247ca31a316fb1f7806a93288cf2b119

  • SHA256

    1bf5e0dcb43e0cc14e9b7248cc170c2c74e647db9e6cb08ca412e5fc07a56869

  • SHA512

    aae7f56685c01cd3169a37bbe13d0d9a9961df38ad5881d3d886dd85c32842374ffb42fa4e62103b021d9235ec1e34c6eaf7331f807a13b11befde08902d9fe3

  • SSDEEP

    6144:v7szSgI4iyGyhWnKWb+wBGs+RlANHIgmDP2wGnMx5nM1Jvl6g7Ogr3SMmwZQFBEC:v75DKWb+wgjOHYhytnOVOZQEEVRWqlbf

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2