Extracted

• • Target
    jaffacakes118_Virus.Win32.Sality.gen.f3d155638940735e6c4664e70474873c
  • Size 1.4MB
  • SHA256 9956f75d2d73a777b2f8b360dfc475e7bc56b42a8e4859b6a6a5fe78cc5545da
  • MD5 f3d155638940735e6c4664e70474873c
  • SHA1 e2488319f7426472d57a965c74f160e1065b39dd
  • SHA512 35d93467d1e46838b043e6edc1882187a1084eb350d9c359946df3c4a9fd3f9ad2034f197dff4c614e080f6de5fcb92e445c9c955581efa405711f4a1e94e10f
  • SSDEEP 24576:htErv2XwKvHoBHErvOmnDfTxJeUrtONbcDvX+ZRDSq9yG0+GYCwdD5sguoaDEy4s:hRvyiLTxwuoNbxzyG0QCKD5daDEyT
  • TLSH
    T1CB657D83E59184A6E84600F213E3477AAD28BF311119E147D3D57F27FB32A347A26B67
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  backdoordefense_evasiondiscoverysalitytrojanupx

  • Family: Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    defense_evasiontrojan

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2