Extracted

• • Target

    JaffaCakes118_551c6a28329d815fb0748bc4f9a451e5

  • Size

    549KB

  • MD5

    551c6a28329d815fb0748bc4f9a451e5

  • SHA1

    a3a3ec4589feda07bb6468825de0ac41f543818a

  • SHA256

    ec4107fcb7459ade2d7f684f92d995a3c9000732fce2c6b119d14abbe044d585

  • SHA512

    6a7f507259ae4c298f1e6ea571c35f3441158f13932b0e54344a3b272b3b7cc660db63f8a5d6571be61acdc86f23879b4481ca9bb72b3a9a8f29d0bd72ca1511

  • SSDEEP

    6144:Elmw1x7oqwUM1Ws4VXXKVNLkK8QTKoS7:1w1xMOHKVSyS7

  Score

  10^/10

  salitybackdoordefense_evasiondiscoverytrojanupx

  • Modifies firewall policy service

    defense_evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    defense_evasiontrojan

  • Windows security bypass

    defense_evasiontrojan

  • Windows security modification

    defense_evasiontrojan

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2