Extracted

• • Target

    4169637d7706c5e78faebca09a4247a1_JaffaCakes118

  • Size

    420KB

  • MD5

    4169637d7706c5e78faebca09a4247a1

  • SHA1

    8b98cf0e37042fb730f80fec7184d49312046bd3

  • SHA256

    6cd26d42c6cfb34472dda17e1c441cde9e2cb6f7e9d23a26deb336760e09a656

  • SHA512

    c12eb1091e1c0f713dad405bc4fac0eeb3214c376f2e985342457c4c193db75a975af1a67a60b8326172165483ea9831ba36a29bdd8a81978ac2674f0092b746

  • SSDEEP

    12288:jUt5x9ApH8/Jjzb3GVCPHZ1wkwWklnOtII0X4QDxZIq:wSH8hjfGVCP5ekw8II0rZIq

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2