Extracted

• • Target

    151d2766dacf0f116fdfadf583132a14_JaffaCakes118

  • Size

    1.7MB

  • MD5

    151d2766dacf0f116fdfadf583132a14

  • SHA1

    b0a29313bea8ca36eb4f47a5ed04a1bd7f71c802

  • SHA256

    dfcb34359d61a552d5f7a31de062f22b294e5a5b20ed2d5af28d9fc85c7bd119

  • SHA512

    8976c601e69aa022f405219e29e3966fa650d43aa5674e58321d1e177bf5ddc3f57bf4295fda1258ff4b828cbdd6bab4b831c2aaaca11e36fae780517845cc11

  • SSDEEP

    49152:P3YHRLOmf6eVrzam0lGMn0+hx2in2frRlr9x:PERLjjhzanGk04Iin2VHx

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2