Extracted

• • Target

    5cad99129de168e9c3fe80680c215b66_JaffaCakes118

  • Size

    248KB

  • MD5

    5cad99129de168e9c3fe80680c215b66

  • SHA1

    a96c4b77aceb3efa96eb348cae4b9b7065676de3

  • SHA256

    c2c3f18f8808ead172a0a88ea4c2ece1562fc352b309d4af26a836d72e865649

  • SHA512

    9d2143c760b127db8792dafc41a2f1075fa9796ac7a40bd5a694c94fec4cd3598303f9e71be81287e1ecc20233e84c55a38948a41f0ca91cd43024c2679de77a

  • SSDEEP

    6144:ecUK3qDpvTT6LDuibjVR11LpO2omTsL5ZhTgpV:ecU7TOLDuibBR11Ld6/hTgX

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2