njRAT v0.9d.rar
- SHA256 d665b09d75102b611905cd1c9d61bbcca64a03af62c218d4cac1289fa74ec3d0
Overview
overview
3Static
static
3njRAT v0.9...s..dll
windows10-2004-x64
1njRAT v0.9...s..dll
windows11-ltsc_2024-x64
1njRAT v0.9...r2.dll
windows10-2004-x64
1njRAT v0.9...r2.dll
windows11-ltsc_2024-x64
1njRAT v0.9...il.dll
windows10-2004-x64
1njRAT v0.9...il.dll
windows11-ltsc_2024-x64
1njRAT v0.9...-C.dll
windows10-2004-x64
3njRAT v0.9...-C.dll
windows11-ltsc_2024-x64
3njRAT v0.9...CH.dll
windows10-2004-x64
1njRAT v0.9...CH.dll
windows11-ltsc_2024-x64
1njRAT v0.9...-F.dll
windows10-2004-x64
1njRAT v0.9...-F.dll
windows11-ltsc_2024-x64
1njRAT v0.9...-R.dll
windows10-2004-x64
1njRAT v0.9...-R.dll
windows11-ltsc_2024-x64
1njRAT v0.9...-S.dll
windows10-2004-x64
1njRAT v0.9...-S.dll
windows11-ltsc_2024-x64
1njRAT v0.9...pw.dll
windows10-2004-x64
1njRAT v0.9...pw.dll
windows11-ltsc_2024-x64
1njRAT v0.9...�o.dll
windows10-2004-x64
1njRAT v0.9...�o.dll
windows11-ltsc_2024-x64
1njRAT v0.9... ..exe
windows10-2004-x64
1njRAT v0.9... ..exe
windows11-ltsc_2024-x64
1njRAT v0.9...et.dll
windows10-2004-x64
1njRAT v0.9...et.dll
windows11-ltsc_2024-x64
1njRAT v0.9...AT.exe
windows10-2004-x64
3njRAT v0.9...AT.exe
windows11-ltsc_2024-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
njRAT v0.9d/DevComponents..dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
njRAT v0.9d/DevComponents..dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
njRAT v0.9d/DevComponents.DotNetBar2.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
njRAT v0.9d/DevComponents.DotNetBar2.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
njRAT v0.9d/Mono.Cecil.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
njRAT v0.9d/Mono.Cecil.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
njRAT v0.9d/NJRAT/PEPSI-C.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral8
Sample
njRAT v0.9d/NJRAT/PEPSI-C.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral9
Sample
njRAT v0.9d/NJRAT/PEPSI-CH.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
njRAT v0.9d/NJRAT/PEPSI-CH.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
njRAT v0.9d/NJRAT/PEPSI-F.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
njRAT v0.9d/NJRAT/PEPSI-F.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
njRAT v0.9d/NJRAT/PEPSI-R.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
njRAT v0.9d/NJRAT/PEPSI-R.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
njRAT v0.9d/NJRAT/PEPSI-S.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
njRAT v0.9d/NJRAT/PEPSI-S.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
njRAT v0.9d/NJRAT/pw.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
njRAT v0.9d/NJRAT/pw.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
njRAT v0.9d/Notificação.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
njRAT v0.9d/Notificação.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
njRAT v0.9d/Stub/Stub ..exe
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral22
Sample
njRAT v0.9d/Stub/Stub ..exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral23
Sample
njRAT v0.9d/WinMM.Net.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
njRAT v0.9d/WinMM.Net.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
njRAT v0.9d/nj RAT.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral26
Sample
njRAT v0.9d/nj RAT.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target njRAT v0.9d.rar
- Size 5.1MB
- Sample260928-3154vsxtdw
- SHA256 d665b09d75102b611905cd1c9d61bbcca64a03af62c218d4cac1289fa74ec3d0
- MD5 dd3783c0cba6f7ab11eb0e7f933e3de7
- SHA1 631f1b9fe2481570f7b733b6f4c332ccbefbf212
- SHA512 41765282d0d81b6b2303cfc80b4dc66e862b0f845d8b3343db820421db2c2539cbe0a10c00a901baa061051f99e8b1491133400675b709b69b311169ddc448e7
- SSDEEP 98304:60h4uv46R34LaDH8y+BUBYpRawzyGTC62GXPnSGAl2JW60b3YfhE2GXPnSGAlH:6+4ERILaDHZ4M8y0C4XPwgJ8bK0XPwh
- TLSH T1FC4633DBACC6B397DB33202407165E5E316CB942CDB250584AD4B399B6685FE1F03BB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 13 IoCs
Checks for missing Authenticode signature.
resource unpack001/njRAT v0.9d/DevComponents..dll unpack001/njRAT v0.9d/DevComponents.DotNetBar2.dll unpack001/njRAT v0.9d/Mono.Cecil.dll unpack001/njRAT v0.9d/NJRAT/PEPSI-C.dll unpack001/njRAT v0.9d/NJRAT/PEPSI-CH.dll unpack001/njRAT v0.9d/NJRAT/PEPSI-F.dll unpack001/njRAT v0.9d/NJRAT/PEPSI-R.dll unpack001/njRAT v0.9d/NJRAT/PEPSI-S.dll unpack001/njRAT v0.9d/NJRAT/pw.dll unpack001/njRAT v0.9d/Notificação.dll unpack001/njRAT v0.9d/Stub/Stub ..exe unpack001/njRAT v0.9d/WinMM.Net.dll unpack001/njRAT v0.9d/nj RAT.exe
File Explorer
-
njRAT v0.9d.rar.rar 5.1MB
-
njRAT v0.9d/DevComponents..dll.dll 4.9MB
-
njRAT v0.9d/DevComponents.DotNetBar2.dll.dll 4.9MB
-
njRAT v0.9d/GeoIP.manifest1.2MB
-
njRAT v0.9d/Mono.Cecil.dll.dll 305KB
-
njRAT v0.9d/NJRAT/PEPSI-C.dll.dll 63KB
-
njRAT v0.9d/NJRAT/PEPSI-CH.dll.dll 13KB
-
njRAT v0.9d/NJRAT/PEPSI-F.dll.dll 13KB
-
njRAT v0.9d/NJRAT/PEPSI-R.dll.dll 8KB
-
njRAT v0.9d/NJRAT/PEPSI-S.dll.dll 10KB
-
njRAT v0.9d/NJRAT/pw.dll.dll 39KB
-
njRAT v0.9d/Notificação.dll.dll 28KB
-
njRAT v0.9d/Stub.manifest1.2MB
-
njRAT v0.9d/Stub/Stub ..exe.exe 73KB
-
njRAT v0.9d/WinMM.Net.dll.dll 43KB
-
njRAT v0.9d/nj RAT.exe.exe 2.7MB
njRAT v0.9d/DevComponents..dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fac9e23262e1ce98746c47da786720a4137c3cd0857ddd96cdc78a218137efb5
- MD5 fa4aaf6ecb9d9a8163af9e0392c35e93
- SHA1 d1b73cefec8658fa3dfa036b18352f7fc0abc446
- SHA512 a3727df00ab016ce74a487258401ed1bbef17b1c6dc4cfa9eb724e94720b547e8c4cec1d908b3e78b78ed6500f87f38c045bff527c9d23fb68db1c96c9f23822
- SSDEEP 49152:TfbOajjkPV5M6BEng14kVsAtLMu5fnChs/V7aqONj9o0eXDRNnxfJtqUrSPNk/0R:WajjQ5M6Bcg1uAt3/VuqON
- TLSH T1F2367D22B7FC8D3FE06E477A8129465443F8CA56F392FBE6168571B43D627108D1B2A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5159542
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.textxc
Size
4.9MB
Virtual Size
4.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.datax
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
86B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dotnet
njRAT v0.9d/DevComponents.DotNetBar2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fac9e23262e1ce98746c47da786720a4137c3cd0857ddd96cdc78a218137efb5
- MD5 fa4aaf6ecb9d9a8163af9e0392c35e93
- SHA1 d1b73cefec8658fa3dfa036b18352f7fc0abc446
- SHA512 a3727df00ab016ce74a487258401ed1bbef17b1c6dc4cfa9eb724e94720b547e8c4cec1d908b3e78b78ed6500f87f38c045bff527c9d23fb68db1c96c9f23822
- SSDEEP 49152:TfbOajjkPV5M6BEng14kVsAtLMu5fnChs/V7aqONj9o0eXDRNnxfJtqUrSPNk/0R:WajjQ5M6Bcg1uAt3/VuqON
- TLSH T1F2367D22B7FC8D3FE06E477A8129465443F8CA56F392FBE6168571B43D627108D1B2A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5159542
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.textxc
Size
4.9MB
Virtual Size
4.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.datax
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
86B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dotnet
njRAT v0.9d/GeoIP.manifest
- SHA256 5fa0fd7178a5883a5a9c66de58f01bcd66fb156a515e21e7cae1e00ec4226360
- MD5 d6a5ba3494c5cfa8adaaba2d5f138610
- SHA1 9a45a49aa80dfbe68e95e395f93ec2fa8fb6023f
- SHA512 ff74dbac16fab7823375c08a63a7d531ba8f7ea953c40f59dfcea017536645a7cdffbb8cb7144252dd0b9a5747937a76f251877e8b027f5de8f2e77542044171
- SSDEEP 24576:zPMxV9cRZHy1FQEETdf55n2fFxjK+fel7yVYgiiTQ1aJA:zUbQZSQdJfKfFxOWU1a2
- TLSH T131555B02AF4655A71462B50EF852347D4CE58EB3DC533B2EF52A36DC807CBA9E0EB065
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT v0.9d/Mono.Cecil.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cdadc26c09f869e21053ee1a0acf3b2d11df8edd599fe9c377bd4d3ce1c9cda9
- MD5 851ec9d84343fbd089520d420348a902
- SHA1 f8e2a80130058e4db3cf569cf4297d07d05c93e0
- SHA512 5e1d1b953fda4a905749eff8c4133a164748ba08c4854348539d335cf53c873eae7c653807a2701bf307693a049ae6c523bd1497a8e659bdea0a71085a58a5f1
- SSDEEP 6144:ueMQM/aMOZabe3h1PtRjAqmYVNf3yTXcYBbt6KMBhu:uF/aMDb8BtRjA7XcYNclB
- TLSH T1D46429185AEC5B3ADD6F97BFD0E6581183B0F0126643E30E4BE4B2B22CB3761C95255B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
318190
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\njq8\Desktop\jbevain-cecil-0.9.5-73-ga5ffcc0\jbevain-cecil-a5ffcc0\obj\net_2_0_Debug\Mono.Cecil.pdb
mscoree
_CorDllMain
Name
.text
Size
303KB
Virtual Size
302KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
824B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT v0.9d/NJRAT/PEPSI-C.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b02c56d29447690cdafd8f2f6877d526d1f6efcaae74017719c460d9b3ee38b8
- MD5 0a1ca904b3d688c01f4e5faae811922b
- SHA1 143a3d4a5865c59926b49add4d596c6fc3e1a797
- SHA512 fdf9b6a6d8ed0f2443907923dcfba6401145ee377454e196ccd057e9ae126d7e66b2607d9c4ed95bbfbdb26321904cd72ed052c3cd8d942785f12f340a864424
- SSDEEP 1536:srUlse2ToVMjLb6M0VqSep+cx4sDEl3N6:OyP+b6MMBep+cx5DET6
- TLSH T1C853296A5794610AC28D57BC90B30F0007F0CA5AA313EF4AAB7951BCDDB63918B4779B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
71662
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
62KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT v0.9d/NJRAT/PEPSI-CH.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 89a1bbe42cde01ddfe531d69dd6ea6575296096010400cb63cbf4999eca52e52
- MD5 1cb8fa647355805f2ae6a7e6bb71b138
- SHA1 f9ab8ab8ea532775023338ce10ae3423c8aabb1b
- SHA512 acf6a42b9e8634f9bf5f4eac01d10d92ec5ef1eeddfb9432cda020cd76e11abf1fd1b5091c5a28bcb9c100f122a1e9026d33b0af833dd603f87cabb37f495517
- SSDEEP 192:aX33uVlADj04riZXNZhNQmPrXxRESnsB3nsZn3oUMOtpsl1vO8:M33uVlAX04O9T4qQSnslsZn3ohQ+ZO8
- TLSH T19552C52673949F23C96C67BD81A2824127F2D6198313DF5FBCD8A1FA5DE2380671038B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19502
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT v0.9d/NJRAT/PEPSI-F.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f132324acf09c0562a1cad1288bfb4021bd991659126d21ecb9499938bf6acb3
- MD5 51c2ee936ded2e55f8bcc8cba6e3b330
- SHA1 1887396650202fc9e10d1044dc40322b2ab46b52
- SHA512 8bf5d473523d1e018b1f3b557104574d314459b2856152f9f25e393ce2128e92fd101465c9ab96053fde43b1c18b8cb31df0af2cebb6fb284da632a60a097e09
- SSDEEP 192:dNc2iE9ZflPFFiydLz/GQYehDnGUx99Lg5Pjxns0cmd3dMtsl:U2xFi2LTfx96Fs0cmd3dMtE
- TLSH T17D52621DAA94CD03C96D577541EE9305ABF38D0A0512E67F8CC918FB4E2A3C46B58BC7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19758
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT v0.9d/NJRAT/PEPSI-R.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 951e537ca810ad5db1b13ecf092d18cfab3001feb266eb33a371c5dd5e3b5b29
- MD5 0b2f09f5e4c2b9b94f2fc54bbeb509a5
- SHA1 4ffed5b181c2c7ad4aac91b9579b8aaf4af6a743
- SHA512 133bd06116f7ec3275c7bbcba013131619322bcfce9f6bba7604c188d2bdb9d086a1c1823d527f4ee315eba037d6e7d3588eabddce2fae637ff1793d77b8d2a5
- SSDEEP 96:GNco4yQ+u1B8LqOHLkmzTOfFjRt0ouLznBnafrGl+MiqNM8Tnj/+OSXdWpdJmv:GNcZ+LqOhGfJkLL4il++NMKnYydJ
- TLSH T13C02401FABA85912C6AC077E48A243096FF382170213DB7F5CC5F8E66F9A3D45634B46
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15118
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT v0.9d/NJRAT/PEPSI-S.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e728afc5d081eaabe3297d0ddd8387d0df0bbed0f73ee3b04c4588cb89efea51
- MD5 70ac2237257012e013331e749d42a70b
- SHA1 5d20a81ed91518717a2f8e1753557449432f70b2
- SHA512 703f434cd3691235c030e1155bacd70fc1f42fea40e7d53901dd8d50fabffa3f8dc9dbde912084c6f74649643f6942bca7699e0cf19d6aea4aa6d27ea433531d
- SSDEEP 192:0zMMbux7bdhJadzoQweyYahwenJZYan2rtEB:/3TJaWQwbYahwyJZ3i
- TLSH T13022B719B768CB57E56C57BD98D7535313B2C22A8307FB6F4CC868F93CA77850A0128A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16494
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT v0.9d/NJRAT/pw.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a3e4bee1b6944aa9266bd58de3f534a4c1896df621881a5252a0d355a6e67c70
- MD5 db87daf76c15f3808cec149f639aa64f
- SHA1 d67f84a44ddc25432ce179aeba9cff778af746ee
- SHA512 ad7dc75254180ff7c988b7f394ad76b696384002457d558469d2c6401dd97cba54c532245bb555ab28d2beda3ab504736bb2b89040a21ba6598929392daab473
- SSDEEP 768:fqcFOkBO3jzamnEjt0Wp8em0nktiwRnKSg42+:fvg3jumny0Wp8em08NBgG
- TLSH T10F037D067BC69301EABD8FB51CB281444372D28F5D13E79E1CE988F42B76B900955BEB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
46542
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
37KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT v0.9d/Notificação.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e490580642f1fb434fa82cff519a67e2c946ab6b1a996b7548090efa880d1a2f
- MD5 d829e5b1c0b11de40392ca48119579f1
- SHA1 cbebbfb4550ee58220bc9e1bececcc6ac26d7667
- SHA512 0fbbc283ab455c71c67fca0d08036c7b75829182245f1e25cc786f2d7e8195751a4eb5f6985cd604a17ea3753ac9126c9b09c7965a14e4e358033bae0cbb35cf
- SSDEEP 384:QEB8TCduPEuokwNwAmkTDB+7HKNUaycIRByyanHCFUOFPwzPwLPwpPwJPwqnPwgz:ReYB++NUnBB36HVOhq4D7
- TLSH T1C8D23A29373D873BC9BECF79D00211454BBAE6467903EBA88F9050CA65D73A885032DB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
35038
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\Users\ST\Desktop\notification_src\NotificationWindow\obj\Debug\Notificação.pdb
mscoree
_CorDllMain
Name
.text
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT v0.9d/Stub.manifest
- SHA256 5fa0fd7178a5883a5a9c66de58f01bcd66fb156a515e21e7cae1e00ec4226360
- MD5 d6a5ba3494c5cfa8adaaba2d5f138610
- SHA1 9a45a49aa80dfbe68e95e395f93ec2fa8fb6023f
- SHA512 ff74dbac16fab7823375c08a63a7d531ba8f7ea953c40f59dfcea017536645a7cdffbb8cb7144252dd0b9a5747937a76f251877e8b027f5de8f2e77542044171
- SSDEEP 24576:zPMxV9cRZHy1FQEETdf55n2fFxjK+fel7yVYgiiTQ1aJA:zUbQZSQdJfKfFxOWU1a2
- TLSH T131555B02AF4655A71462B50EF852347D4CE58EB3DC533B2EF52A36DC807CBA9E0EB065
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT v0.9d/Stub/Stub ..exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 a984bb9d8063470b8645d85b8e004ee290b9e5707644f668d632c5da627d3f9f
- MD5 829b80f55deb41d6adaf37f3b81bdc3a
- SHA1 dfe2b4fc79e79d2b8b09057130d7de191ff5bed9
- SHA512 9c668c360c3b9caab2e2546a679f9c1a36ed0fba758cf1ca3a85b8ed708db6bbb69a284dff20272f5f7b28df6b31ee95719a8be5c240b4e444666c2f9dae3017
- SSDEEP 768:K77KxHRv1h4XAV/GEt7aaR9oW9Uw1NjM7qpSNONhit0DAA2tO4JzYcHeUZ:K+HRv1GO/nXKW9TM7JN4hiP84YU
- TLSH T10C73198EA3D44914E1BD3BB72872B20647B0F45B9A12D79F4DD9C4E93F7B240CE81296
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
77310
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Users\admin\Desktop\Stub هذه الشغال وتوب سورس كود\Stub\obj\Debug\Stub.pdb
mscoree
_CorExeMain
Name
.text
Size
68KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
149B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT v0.9d/WinMM.Net.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 59e2ac1b79840274bdfcef412a10058654e42f4285d732d1487e65e60ffbfb46
- MD5 d4b80052c7b4093e10ce1f40ce74f707
- SHA1 2494a38f1c0d3a0aa9b31cf0650337cacc655697
- SHA512 3813b81f741ae3adb07ae370e817597ed2803680841ccc7549babb727910c7bff4f8450670d0ca19a0d09e06f133a1aaefecf5b5620e1b0bdb6bcd409982c450
- SSDEEP 768:LyasDzF2TDSemqD9tGI+ffwj2Au0LVpqmf7KxcOOrYCPTxqPb85:LyaXKemqD9tGI+ffwj2Au0LVpq4KWrlv
- TLSH T1EB13B60479A85CB9CB2F013D6CD61211FAB18D647227B62B1CBE70F318977DE9A41AF1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
50302
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
41KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT v0.9d/nj RAT.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 629fcf97c3801bde2c792d60e3859c63c4ab7c15a5f07a050beb3bd32d41d821
- MD5 285611f9780e484cedeb1f6f7e60e8de
- SHA1 e09b556b96e9587d62b56761e334ef8915721959
- SHA512 3102e4521d97d07243b5602143ed553356281224c4c5a58b2e43809bd09cf5f9a6970e916f50c657984bdd1e2593ea9beb069f7bac90f8f6e6d49bacddd6e293
- SSDEEP 49152:aeomjvUXktksJVEZsI6zBCHH/rxSKHZEJRH/yMo7tY:aUh2sJKviBE
- TLSH T1F0D5A30335805D89F13837F28808CB745365AF685222A62E65F73E5BFAE7ED2AD417C1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2784558
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Users\admin\Desktop\SRC - EngRat v0.1.0B رقم19\nj RAT V0.9d\EngRat v0.1 B\obj\Debug\nj RAT.pdb
mscoree
_CorExeMain
Name
.text
Size
2.6MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
153B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ