Extracted

• • Target
    jaffacakes118__93d0eb75e69e94736d6bea124cc66854
  • Size 145KB
  • SHA256 33f5fe346eadaaa6526a60ede0c5a5ae0aa81ab7ed1926272fa8fa6fdc937697
  • MD5 93d0eb75e69e94736d6bea124cc66854
  • SHA1 a60be35f025d0eb4c75e72479e392dae81af8f83
  • SHA512 851c55c67c8b9b00d65490e16589a07784b74a37fe1aebd4319cb5babf3a5db23246940dd28c5db87268c22816b58b42f6200df71bec0c64e352d42f0e88f35a
  • SSDEEP 1536:YxB+Kx1eLWf3JGaI4CB2S1IHNH54d2yRuW+cqmPiVSwOCCE:YxBH1aC5AL1mZ4s0uW+c3P0fdCE
  • TLSH
    T1B5E3024D9DFA1285C0EB3C7EE4B1FE6160CC97AC3A915A414B585A6ED20563F4908F8F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  backdoordefense_evasiondiscoverysalitytrojanupx

  • Family: Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Windows security bypass

    defense_evasiontrojan

  • Disables RegEdit via registry modification

    defense_evasion

  • Disables Task Manager via registry modification

    defense_evasion

  • Windows security modification

    defense_evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2