Extracted

• • Target

    a97e3a1c95a4c991f7003fe1d371d2bb3f4bc7e46095dec55ed2cb8ec7cf7033N.exe

  • Size

    65KB

  • MD5

    34beedf729fe96e4373520f73f4bb020

  • SHA1

    948d82dfd9c28bbfd06bfd6da6e23cd423896e12

  • SHA256

    a97e3a1c95a4c991f7003fe1d371d2bb3f4bc7e46095dec55ed2cb8ec7cf7033

  • SHA512

    54fdd8c97a1c4bba04e0287836ce1937bc6fc9b828eabebd9ce72ffe66dd9cb65ab4d49516d8dac7eb724fd582b3e503809ecd9f338ceb640b20b02f7104de47

  • SSDEEP

    1536:JGjtEqXJ0fjxiOYoqDdOz7iHF8zD1LvEVgOPgx/89M0/U:sjdJ04D8z7iHwBzOkX08

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2