Extracted

• • Target

    ea74dd299e502e2b2862e10bdec994ee_JaffaCakes118

  • Size

    92KB

  • MD5

    ea74dd299e502e2b2862e10bdec994ee

  • SHA1

    64ca1e67a04cf1dd160269cd4e5096371b517bc9

  • SHA256

    61f5043284610f9d5280cb278e9235f2a71afbffe587bd2331ffa637850972f0

  • SHA512

    1c1bb8503e456964c2348f84d9104f2a9a89096a4f252aaa6f33ec0d6f261cf1d4b8a4f34ac5b5357163e3a5e983704920a5e78734866ea397be688205870129

  • SSDEEP

    1536:uZtEjAbVAo0iH4y45thOxiAICz+05CC2NClLSMhN:gyjAbFJH4Pth4z9CC2y9

  Score

  10^/10

  discoverysalitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2