Extracted

• • Target

    bf6480a31daa1447b829d547c2384df4_JaffaCakes118

  • Size

    308KB

  • MD5

    bf6480a31daa1447b829d547c2384df4

  • SHA1

    5302dc044c267d97cada1c957f7c062266e5330a

  • SHA256

    12daecc46069bc39ef556f1bc9197f91e808f2a9292ef1fb3b8eaf4cf66873e0

  • SHA512

    af2ff5e2586b1b8d8c720ee1cd461b01dbc446460583ac8d0668afe99ae1cf476c16997275644f62695d73c16caf80b126181304d5adc0834967f4a8bb43295e

  • SSDEEP

    6144:8GhK/tl+OVVT+nE260NzwMeGj4/At8swMeGj4/At8:MD+EVT+E2v1wMee4/AeswMee4/Ae

  Score

  10^/10

  discoverysalitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2