Extracted

• • Target

    e95f9586de3268d42da29daf8d0705fe_JaffaCakes118

  • Size

    240KB

  • MD5

    e95f9586de3268d42da29daf8d0705fe

  • SHA1

    10b99516205e618c925728f866a56f87e0db915a

  • SHA256

    fa64b29ee5ed4b1940e3e0ef802082e8a3c9d3d496c81d63f6d645b8cac5d389

  • SHA512

    fc1f745884c3312e7fe31c845eae44556cf182642ee9a5e5fc01a59de706e300cc25d437656c6c18319fed142c91f56d236c9b90935c247fc9a409a011f0b736

  • SSDEEP

    3072:/MWsQNxJUJTp2E+qvFuIoF1PYUGQQEKGLY+q+XrNJd2/GP+oh1Ov8oKBjcUZftb0:2QOpkpNJIvD8j7p6

  Score

  10^/10

  discoverysalitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2