Extracted

• • Target

    8d7a12617233030d0c694a1eb8c527274bef32dd4aad741c181051ec4f47e160

  • Size

    727KB

  • MD5

    51935644561505e5a968b748067f68b0

  • SHA1

    b0ea8f67d7c68f01b3b59a6a0953b6c3277748e0

  • SHA256

    8d7a12617233030d0c694a1eb8c527274bef32dd4aad741c181051ec4f47e160

  • SHA512

    3fc6e261e348a57c7c954ade736c21aa4197a7edf9b4d1c4c8f92b9eab8e80c2fc250ce3ec5c8d7b9cc263587a632c1fb5804db94aca1f34e757687f96da1623

  • SSDEEP

    12288:Yil6AlE63dbar1eRpyJBtJeRoyjBBjWJ3sf1mLfNXKrEVmLoLPGeNW+JOT8bTHYC:5MAlEAd+heRpyztJeRoyjEsf1sfUoTGM

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2