Extracted

• • Target

    7cecdd2d9ecd11b105ae7a07c00c3bba

  • Size

    1.3MB

  • MD5

    7cecdd2d9ecd11b105ae7a07c00c3bba

  • SHA1

    3e91fac046ef04b751757e5f6beb04b78383a3eb

  • SHA256

    bd5cee840375c669e230992ce792010a8e643a388329ba8f2c744cd7864a52df

  • SHA512

    fe80c5616702f383a30e9416d650966ea90dad81683ec899b3d33fe962a1b72fcd0fd70d0c26995dc9c19edb9013423176bcb5d44c338ea54dc471bb10f117ea

  • SSDEEP

    12288:+KmPKcel4LK12wVypaD5tgFn9Z02N3myJH0UWxS1ORGR+fk9JxgZR5b5:+ucelR4wVypajmFBdJHPWxiORGr9qT5

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2