Extracted

• • Target

    55e49064856634e94eba2287fd151924_JaffaCakes118

  • Size

    163KB

  • MD5

    55e49064856634e94eba2287fd151924

  • SHA1

    6f73e1a636c64e1840f2f67d5136f6a95da79383

  • SHA256

    eb9d7dccb2b76a4a196b93f3954282229c0475378ef908dc86d905ff6cb82253

  • SHA512

    a167a01ecdc472723d6024fd0793e85846661ac71465e3a1091936b7ac7fbcf04200da2ed8a7db9ac84a3966200eac4392c26b7e826a10eed333928a7e5b47ae

  • SSDEEP

    3072:1NQKPWDyuI0fFJltZrpReFX3DvWNmjNJ6y6lCrBFS22:1NSDyuIkFthpk42W3lGF72

  Score

  10^/10

  discoverysalitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2