Extracted

• • Target

    1745976cfddc23fab3d84e2d43b8b356_JaffaCakes118

  • Size

    108KB

  • MD5

    1745976cfddc23fab3d84e2d43b8b356

  • SHA1

    23fc3c0c9dc728634c0fe145826c7764baec7471

  • SHA256

    19d45f7919f56fdb6b5a56f0d3061ed52f11b4de4637c7b49edfdb4a1881e44c

  • SHA512

    2879044c8f5e7733772398ed4a28e9a88431de1ed3c336b6d0468e5132a2acf73a78f5070fca82f673ce0f87e074ee35647b67db95ac9add1f37371af5302f7f

  • SSDEEP

    1536:ISnC6uJRiX9nYLrBczdq6p+IaK1FXgbKBmdurFsqSbmrtlX+/ns:IBjiX9noyzdxKKB9NSutlX+E

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Checks whether UAC is enabled

    evasiontrojan

  • Suspicious use of SetThreadContext

  behavioral1behavioral2