Extracted

• • Target

    JaffaCakes118_65fdc7ab174b342822ec1ade49a0c033

  • Size

    418KB

  • MD5

    65fdc7ab174b342822ec1ade49a0c033

  • SHA1

    922845a65b8e52d3d5958dd617a47b3c146d1269

  • SHA256

    521b6ed3ff99ad0dc53643ff50b48ca99a4d254bad5711274361b4c56de664b4

  • SHA512

    5cb7fbf941d5a64ca2a8786a62f351e50171d2b0b8de7889dd53f3b10a9434699ac8a69ffe23d647d92490b2a46e89cabc4e2c6340b054afc9643605a65e0fa2

  • SSDEEP

    12288:YqiROi9cGgawVdZ5vtKDl0EB6PupK8G4lbzPs:DiROi9tgtVGxZpKQlb4

  Score

  10^/10

  salitybackdoordiscoveryupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • Suspicious use of SetThreadContext

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2