Extracted

• • Target

    fa82552e55271948b11ed5504b65f408_JaffaCakes118

  • Size

    880KB

  • MD5

    fa82552e55271948b11ed5504b65f408

  • SHA1

    416524c296953376d22c41ec61b570ec20782791

  • SHA256

    f0dcd02718befe252b7e2d38cfa18cdc823d69e962c0be9a7df64dd5a4079f15

  • SHA512

    28920e8b9611dd9d12034a40573e65b2f5e93fec35963b58406238ea2e818b8b3fcadba776e7ee407f8b3474d61e70da765ee12e8ec3452a99e2c95cce2a54bb

  • SSDEEP

    12288:mM9EiS5GWehKiReq1oVGCjNwTNTrqMr+9nCKdFPru6STFvt7:muEiS5GWcZSrw1snCMFjFSz7

  Score

  10^/10

  discoverysalitybackdoorupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • Suspicious use of SetThreadContext

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2