Extracted

• • Target

    c8fde8c656b51bb82efa3c8ff012a603_JaffaCakes118

  • Size

    308KB

  • MD5

    c8fde8c656b51bb82efa3c8ff012a603

  • SHA1

    6176c285ca755c590bf42103429dbb698fe23c96

  • SHA256

    fc6f0d610fae52e4ee9e948b3092fdd65048519a858283ee109c9696f352db83

  • SHA512

    2b75deda9ba1ab1dcf1277594733d24105dfb301ceb21a779fb59d0d801e664531fe18bd010121e13787f4dc53e26a8f18596bb26a1d879dbdc56937c6860059

  • SSDEEP

    6144:QO3OBhQ9TdoKVICgb5cNzNDRi2fM+j3bntgpsi4y:ghYBoR25NDRzM+nu

  Score

  10^/10

  discoverysalitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2