Extracted

• • Target

    bb8f466cf32dec9c0637ac072d042bf36dd7cc3a0dadef8fbfe71b6a5e9127ac

  • Size

    265KB

  • MD5

    ef10528c63cea689df9e1dffc659b1be

  • SHA1

    2ef939e803017691d096be072f319bb3d195f8e0

  • SHA256

    bb8f466cf32dec9c0637ac072d042bf36dd7cc3a0dadef8fbfe71b6a5e9127ac

  • SHA512

    22a636cbb9d3dbb9d91fd926d0e68b66b65f00135efad045db47693cb599f6daf132439b3d6ffda3e1c1b13b6eaad14980df7fc805c0aeac96e689e1910071b2

  • SSDEEP

    3072:0HrfzYYc6X/YeW4l/DReos0gXf+EvC6C36eCWdMuoB+s6LRCkuB9N3iQzFXf8qUm:IAcl/DRfkTC3dM7B+mCjSaLxgMs+qH

  Score

  10^/10

  salitybackdoorupxevasiontrojan

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2