Extracted

• • Target

    366052d194e4c44cf95e113c89058a71_JaffaCakes118

  • Size

    168KB

  • MD5

    366052d194e4c44cf95e113c89058a71

  • SHA1

    544e93506dfc1feff1f1e3ee0b064d2e74cfc304

  • SHA256

    34a3984bfaf6bbec8a37ff99a026dc51ba77ab65585867adf685e796fd633fe0

  • SHA512

    8b0bf20715dc2a55752506cbc3b51d7b83c34de7a21c52cfb97d8ebd359a3787ecb5d285aee0309954e2396824bebf345ee088e4a7678e787a9976fc85757c6a

  • SSDEEP

    3072:u8NQKPWDyuReaJltZrpRnvuR5jsxEn8w0MgnrOrcoyo:BNSDyuRvthpUn8LCra

  Score

  10^/10

  salitybackdoorevasionpersistenceprivilege_escalationtrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2