Extracted

• • Target

    255998803ee507512c36d92aed97b09eefd9d82512b34ba7ebb6d4b341ceb9d7

  • Size

    208KB

  • MD5

    6af5d55b323973d578eab7a12dd554ea

  • SHA1

    169a2895645566e596595c6c2647085e1c827b62

  • SHA256

    255998803ee507512c36d92aed97b09eefd9d82512b34ba7ebb6d4b341ceb9d7

  • SHA512

    5012ab82e5bd4c814d392302bba35218bbaa487ca25a018d7b8f9913c0b5746084b086ad1894abf68401308ec32a3c77c92f0a1f9396ec4f00719200b1de1c3b

  • SSDEEP

    3072:sGviwh0bUR1uwCgYaKB1+3gnMouw8qoJUFfi4xD/DK8vhdA4uxqzG:saNRrwB1+3gnHNQWpALxOG

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2