Extracted

• • Target

    51031eb2957eac19640529de0c551b6f.bin

  • Size

    853KB

  • MD5

    51031eb2957eac19640529de0c551b6f

  • SHA1

    141b1a09330a11a7ff8da00eb02fbe1670f0fbb0

  • SHA256

    1547745358f542a3620a00dd50235f6cf7665687064adf1d6a0a112b45081644

  • SHA512

    c268709bbd6be466dff2e0c4dc8824337cbfd25818a02afa45328d50cf548c8367cdb18dde527431334de3bc1e80cf76e9fb83b7acd6620110b87cb08094a854

  • SSDEEP

    12288:W9j+65uTSP/FqLm/jkqyq/7lOOTfnqTRUz/W64ZUVPhfC:r8uTojk+70OTfnqyz/62I

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2