Extracted

• • Target

    1c4ef8c0cad4fad9a4735b4e6ae35ee1_JaffaCakes118

  • Size

    1.2MB

  • MD5

    1c4ef8c0cad4fad9a4735b4e6ae35ee1

  • SHA1

    320ade0083ffceb27eb6d9c2f3b51d37d92c9b11

  • SHA256

    1d86868abe3436a74914d85ba25f32995e80e91b73ab471a5e20f791bb1ce28a

  • SHA512

    05e22ae1755b4d99a618edd98cf03538b7b48e5e6dc5d4e0619511066d6d6408c744fb5424533ecc15b8fa173bef597dd31f8420ffd5a967d1f90e025da990c9

  • SSDEEP

    24576:zk4slMippnVRuA+Rk3bwtXbyEnk02qFbHzKZ8u4wObL36v3Dp2:z4MWnVRuA+Rsw9byEnr2qFbH88uRNv3I

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2