Extracted

• • Target

    4e588fc1c336e8c453c3a29b30eccf76fd2122f299b643c4197d67f2896dc17c.exe

  • Size

    120KB

  • MD5

    dc3bbfc6e9091a53a317227febc1e4d7

  • SHA1

    080aac5ec1de2bdfb46be09d665d11ef188ad540

  • SHA256

    4e588fc1c336e8c453c3a29b30eccf76fd2122f299b643c4197d67f2896dc17c

  • SHA512

    36e0cbe1744bbbebfdceb73c1ccc17729de4652abf9ff18b75664f2462eabe96b4377059d7e366a396d679512d803c5b44d5f5fceb6ff03b4d72481e15f97ecd

  • SSDEEP

    3072:m9tSR5/g/J/h5uVm9Zi68W/4vphU83q64EX26jMt7Egylk:mWR5/g/J/vzr8WQ/U83JH2UMEgJ

  Score

  10^/10

  salitybackdoordiscoveryupxevasiontrojan

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • Windows security bypass

    evasiontrojan

  • Windows security modification

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2