Extracted

• • Target

    9f15bfdacdeba4f7df88c6fc24b20b37c154fe9124d08b89c04451cf3f8a6609

  • Size

    2.3MB

  • MD5

    dca1514d8af9ee15e70f76bbdc855712

  • SHA1

    7b954e7c1c4b5bf045d40c4a6e0a5c15b62bc4e8

  • SHA256

    9f15bfdacdeba4f7df88c6fc24b20b37c154fe9124d08b89c04451cf3f8a6609

  • SHA512

    995decff86d722799a23bf540ddee155b01fba386a218bc590bf1b0e7b5e18de14da632adda85534abfefb701420dec03cd14f0939323db3106a3e245b5b376a

  • SSDEEP

    49152:UiggggMKvHkuaxK3+AF1yUj7ZmkzKP/hVPLpRKXE7OPa:UcHkuao1yyNghhoPa

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2