Extracted

• • Target

    JaffaCakes118_4733657698de5a24030a761c7e2d7608

  • Size

    1.8MB

  • MD5

    4733657698de5a24030a761c7e2d7608

  • SHA1

    1f7589a3aadb1c44ed40fcc832cf3d7d10e09fe2

  • SHA256

    46f0a87cf87c0eef6943792b546c884b1cbf49cc199e1f7709ca8493f3718237

  • SHA512

    162bde3cd85e60e301ff194184d9936b925d2251a3dd1f705dc6e15715456f3ee40d59084a490c1550b829d337a1b41a782a071f5e6e1d20efdf80d2b563caf4

  • SSDEEP

    24576:oCdTb3f/ebhYa7edBBLdH2vmuujgd/Bey8XLTIJw9++TX//k:oCd33f/B+vyW/I5XLTIw9NX/s

  Score

  10^/10

  discoverysalitybackdoordefense_evasionspywarestealertrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    defense_evasiontrojan

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2