Extracted

• • Target

    JaffaCakes118_9fddb8bc333a44584ae07fed838c4e8c

  • Size

    119KB

  • MD5

    9fddb8bc333a44584ae07fed838c4e8c

  • SHA1

    73e685e7b967d929dfe4fb6800d7ee7ca27227d3

  • SHA256

    f78b9d9ff45cf181605153ba6e4da30a4f68a567948c734f3905bb4ca2f9bf92

  • SHA512

    505e3e3db13d0116b5472f9d390aa4c826fd06016f2d2b11ed5d28386ececffb1e878a71dc7234d236b3557f48eab52c30ec41c5347679db7666578df36bbed7

  • SSDEEP

    3072:1jhlbyDImJFAI0jSurj+vEh8BIs7QbXXHHW:1t99Fj+vEhFrXHHW

  Score

  10^/10

  discoverysalitybackdoordefense_evasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    defense_evasiontrojan

  • Deletes itself

  • Executes dropped EXE

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2