Extracted

• • Target

    JaffaCakes118_3e9e7b58f26fb815eb8221501c360093

  • Size

    1.3MB

  • MD5

    3e9e7b58f26fb815eb8221501c360093

  • SHA1

    8769545d0f720eaf714ddc155f20bf7e3b6a78e6

  • SHA256

    d1e478da2d17b649829ac172ee31d39f336d13b10d1c4a8d4e70be6f9b1259e0

  • SHA512

    db4c456c570d9f6947c056388f224ba3a56bd2000ebfb43aeef3dca01a16ff4a11643204c4b64b972247f36b2080b3e86f964cfe2e8a5755e3ec3bc4adb5db1d

  • SSDEEP

    24576:UA76mFXstOXQfJXgWXnPp8p+S9EIKwk4PMzsF9n+7W+hx5i59metrCvlo7FnfAkI:UA7lBXQSW/pY9EIKwk4PMoZ+SyggEr8x

  Score

  10^/10

  salitybackdoordiscoveryupxdefense_evasiontrojan

  • Modifies firewall policy service

    defense_evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    defense_evasiontrojan

  • Windows security bypass

    defense_evasiontrojan

  • Disables RegEdit via registry modification

    defense_evasion

  • Disables Task Manager via registry modification

    defense_evasion

  • Windows security modification

    defense_evasiontrojan

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2