Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

f16d27ee01...18.exe

windows7-x64

10

f16d27ee01...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f16d27ee01a658249d7ef7785c809d29_JaffaCakes118

  • Size

    23KB

  • MD5

    f16d27ee01a658249d7ef7785c809d29

  • SHA1

    656746a12642fb533b78c43128874d155fc6849b

  • SHA256

    0cd93e398dc5e658be50cff833f362dcb0afea7c91d82ac7e9cce71adfe66b55

  • SHA512

    6e5ae3feadd19f2c8a58c485de2d9d2dc8c9539831d51ae2337310a56dd121deed1e835afb9698ba7c8922a56ce04e74cffa4e9cd9d4943db809a3477ee3f17f

  • SSDEEP

    384:t0Xn2650N38Zj+bxJeiZcsdfw6BgnewhreyRtmRvR6JZlbw8hqIusZzZXKM:+jmMy1ZXRpcnuO

Score
10/10
4njrat

Malware Config

Extracted

Family

njrat

Version

Hallaj PRO Rat [Fixed]

Botnet

4

C2

mscompany.dynu.com:50001

Mutex

9b57a8e4ade1ac12ca816d239ef62b68

Attributes
  • reg_key

    9b57a8e4ade1ac12ca816d239ef62b68

  • splitter

    boolLove

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f16d27ee01a658249d7ef7785c809d29_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections