Extracted

• • Target

    JaffaCakes118_739114d339905349c6d01a7ae168df53

  • Size

    1.0MB

  • MD5

    739114d339905349c6d01a7ae168df53

  • SHA1

    a719fc985ad1a2f96410150fef8103a0b3650dba

  • SHA256

    cffe9ce252b2852f54dc5de2f6e929ae684021155d769e0583dd775c8c5ad587

  • SHA512

    c99e31950314c6b8357abbe0d51ffe9f8ae46552c75e1a46254cb179f3a735ab9d4f1f60446c1741e46c29d333bfe47d91f04b4b11dc05c22874b125b3630550

  • SSDEEP

    6144:zkGnIEXdMUwNmSUwhwCydxs7Q2RMfHHgIIF:rN6Uw5Uwyfdxs7Q2RrvF

  Score

  10^/10

  defense_evasiondiscoverysalitybackdoortrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    defense_evasiontrojan

  • Disables Task Manager via registry modification

    defense_evasion

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2