Extracted

• • Target

    JaffaCakes118_0773b8e79dda85a7554382b2a896e9d0

  • Size

    193KB

  • MD5

    0773b8e79dda85a7554382b2a896e9d0

  • SHA1

    cac34559d35446d7fbc9bffd1e3b3282db1bfe0a

  • SHA256

    bbc4290fa49ade0e2407ed365ca959d53eb87c379c884878cbb97cab2e1f4915

  • SHA512

    5e5b73c36d5ca95c831a5930cf5329e2bcd9c173c7477887c156ea1c648d9a9fa1a8a28432622209447c8d3d0fae58a836e88eb0e83ce31ff3c774ae9484e423

  • SSDEEP

    6144:/tpksMsUPzjTwURtM19ctQFk4JWLuk+0xH://jFMPVqe4JWyk++H

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Drops file in System32 directory

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2