Extracted

• • Target

    d631940abf66f94165395bde0587c4c5_JaffaCakes118

  • Size

    187KB

  • MD5

    d631940abf66f94165395bde0587c4c5

  • SHA1

    7cd14064dbbf93ce293cb8d59ff97c5680e470a9

  • SHA256

    dc677fbb6d9e8bbb0f6a3d97011e27205a5500d913cc0a1c6bf5008bc1999ab2

  • SHA512

    c19757765a5671c128157634f40c06d0260b153642c83fcfaddfd2dc2037ebcd3c43154e749fd5576fa94b74a8ba8346a90a3e60a5444a4c26ed83f3406c8871

  • SSDEEP

    3072:eqF1TEkuZOxq8YqprbFQYU0FK236iTiS00ZQ37olKOU0BkoW0kE:ZFFQYU0FT+0+7IUekGkE

  Score

  10^/10

  discoverysalitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Checks whether UAC is enabled

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2