njRAT-Platinum-Edition-RuS-main.zip
- SHA256 f19b6567940ed69b1abe32de194fd96ce45356fc84b73a95239c651e6813189b
Overview
overview
10Static
static
3njRAT-Plat...in.zip
windows10-2004-x64
1njRAT-Plat...in.zip
windows11-ltsc_2024-x64
1njRAT-Plat...DME.md
windows10-2004-x64
3njRAT-Plat...DME.md
windows11-ltsc_2024-x64
3njRAT-Plat...IP.dat
windows10-2004-x64
3njRAT-Plat...IP.dat
windows11-ltsc_2024-x64
3njRAT-Plat...il.dll
windows10-2004-x64
1njRAT-Plat...il.dll
windows11-ltsc_2024-x64
1njRAT-Plat...on.exe
windows10-2004-x64
10njRAT-Plat...on.exe
windows11-ltsc_2024-x64
10njRAT-Plat...xe.xml
windows10-2004-x64
3njRAT-Plat...xe.xml
windows11-ltsc_2024-x64
1njRAT-Plat...on.xml
windows10-2004-x64
3njRAT-Plat...on.xml
windows11-ltsc_2024-x64
1njRAT-Plat...am.dll
windows10-2004-x64
3njRAT-Plat...am.dll
windows11-ltsc_2024-x64
3njRAT-Plat...ch.dll
windows10-2004-x64
3njRAT-Plat...ch.dll
windows11-ltsc_2024-x64
3njRAT-Plat...ic.dll
windows10-2004-x64
1njRAT-Plat...ic.dll
windows11-ltsc_2024-x64
1njRAT-Plat...lg.dll
windows10-2004-x64
3njRAT-Plat...lg.dll
windows11-ltsc_2024-x64
3njRAT-Plat...pw.dll
windows10-2004-x64
1njRAT-Plat...pw.dll
windows11-ltsc_2024-x64
1njRAT-Plat...c2.dll
windows10-2004-x64
1njRAT-Plat...c2.dll
windows11-ltsc_2024-x64
1njRAT-Plat...nd.wav
windows10-2004-x64
6njRAT-Plat...nd.wav
windows11-ltsc_2024-x64
1njRAT-Plat...ub.xml
windows10-2004-x64
3njRAT-Plat...ub.xml
windows11-ltsc_2024-x64
1njRAT-Plat...tub.il
windows10-2004-x64
3njRAT-Plat...tub.il
windows11-ltsc_2024-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
njRAT-Platinum-Edition-RuS-main.zip
Resource
win10v2004-20260911-uk
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
njRAT-Platinum-Edition-RuS-main.zip
Resource
win11ltsc2024-20260911-uk
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral3
Sample
njRAT-Platinum-Edition-RuS-main/README.md
Resource
win10v2004-20260911-uk
windows10-2004-x64
4 signatures
900 seconds
Behavioral task
behavioral4
Sample
njRAT-Platinum-Edition-RuS-main/README.md
Resource
win11ltsc2024-20260911-uk
windows11-ltsc_2024-x64
4 signatures
900 seconds
Behavioral task
behavioral5
Sample
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/GeoIP.dat
Resource
win10v2004-20260911-uk
windows10-2004-x64
4 signatures
900 seconds
Behavioral task
behavioral6
Sample
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/GeoIP.dat
Resource
win11ltsc2024-20260911-uk
windows11-ltsc_2024-x64
4 signatures
900 seconds
Behavioral task
behavioral7
Sample
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Mono.Cecil.dll
Resource
win10v2004-20260911-uk
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral8
Sample
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Mono.Cecil.dll
Resource
win11ltsc2024-20260911-uk
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral9
Sample
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/NjRat Platinum Edition.exe
Resource
win10v2004-20260911-uk
windows10-2004-x64
26 signatures
900 seconds
Behavioral task
behavioral10
Sample
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/NjRat Platinum Edition.exe
Resource
win11ltsc2024-20260911-uk
windows11-ltsc_2024-x64
24 signatures
900 seconds
Behavioral task
behavioral11
Sample
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/NjRat Platinum Edition.exe.xml
Resource
win10v2004-20260911-uk
windows10-2004-x64
5 signatures
900 seconds
Behavioral task
behavioral12
Sample
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/NjRat Platinum Edition.exe.xml
Resource
win11ltsc2024-20260911-uk
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral13
Sample
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/NjRat Platinum Edition.xml
Resource
win10v2004-20260911-uk
windows10-2004-x64
5 signatures
900 seconds
Behavioral task
behavioral14
Sample
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/NjRat Platinum Edition.xml
Resource
win11ltsc2024-20260911-uk
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral15
Sample
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Plugin/cam.dll
Resource
win10v2004-20260911-uk
windows10-2004-x64
2 signatures
900 seconds
Behavioral task
behavioral16
Sample
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Plugin/cam.dll
Resource
win11ltsc2024-20260911-uk
windows11-ltsc_2024-x64
2 signatures
900 seconds
Behavioral task
behavioral17
Sample
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Plugin/ch.dll
Resource
win10v2004-20260911-uk
windows10-2004-x64
2 signatures
900 seconds
Behavioral task
behavioral18
Sample
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Plugin/ch.dll
Resource
win11ltsc2024-20260911-uk
windows11-ltsc_2024-x64
2 signatures
900 seconds
Behavioral task
behavioral19
Sample
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Plugin/mic.dll
Resource
win10v2004-20260911-uk
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral20
Sample
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Plugin/mic.dll
Resource
win11ltsc2024-20260911-uk
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral21
Sample
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Plugin/plg.dll
Resource
win10v2004-20260911-uk
windows10-2004-x64
2 signatures
900 seconds
Behavioral task
behavioral22
Sample
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Plugin/plg.dll
Resource
win11ltsc2024-20260911-uk
windows11-ltsc_2024-x64
2 signatures
900 seconds
Behavioral task
behavioral23
Sample
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Plugin/pw.dll
Resource
win10v2004-20260911-uk
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral24
Sample
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Plugin/pw.dll
Resource
win11ltsc2024-20260911-uk
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral25
Sample
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Plugin/sc2.dll
Resource
win10v2004-20260911-uk
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral26
Sample
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Plugin/sc2.dll
Resource
win11ltsc2024-20260911-uk
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral27
Sample
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Sound/Sound.wav
Resource
win10v2004-20260911-uk
windows10-2004-x64
6 signatures
900 seconds
Behavioral task
behavioral28
Sample
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Sound/Sound.wav
Resource
win11ltsc2024-20260911-uk
windows11-ltsc_2024-x64
5 signatures
900 seconds
Behavioral task
behavioral29
Sample
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Stub/Stub.xml
Resource
win10v2004-20260911-uk
windows10-2004-x64
5 signatures
900 seconds
Behavioral task
behavioral30
Sample
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Stub/Stub.xml
Resource
win11ltsc2024-20260911-uk
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral31
Sample
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Stub/stub.il
Resource
win10v2004-20260911-uk
windows10-2004-x64
4 signatures
900 seconds
Behavioral task
behavioral32
Sample
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Stub/stub.il
Resource
win11ltsc2024-20260911-uk
windows11-ltsc_2024-x64
4 signatures
900 seconds
General
- Target njRAT-Platinum-Edition-RuS-main.zip
- Size 16.2MB
- Sample260930-se8yhsvtbw
- SHA256 f19b6567940ed69b1abe32de194fd96ce45356fc84b73a95239c651e6813189b
- MD5 ba15182f19b6ff9422d0ba99651ef4ad
- SHA1 da4dc6eb7c2f87fe6d6317e0bbca8ad4bb11df9e
- SHA512 cca91ad755f3bb224e05bad49ce92d402d38a8d89e9ab46596fec731805f715e1236efcd6d486df250dbf481f829ee68905cfeb55a1722c048d91b360341e5a1
- SSDEEP 393216:PpDPYLzhMONjDPmFLqSFwHZqBB3VdCMzg5TtY15XV2TPSEm:9OdDOFFMGB3rCW4J+XFEm
- TLSH T17B0733AFC0344574E7374CAF6A85F2C59A2FA2431B419E967B7ED023ACC72B58654F40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 9 IoCs
Checks for missing Authenticode signature.
resource unpack001/njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Mono.Cecil.dll unpack001/njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/NjRat Platinum Edition.exe unpack001/njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Plugin/cam.dll unpack001/njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Plugin/ch.dll unpack001/njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Plugin/mic.dll unpack001/njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Plugin/plg.dll unpack001/njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Plugin/pw.dll unpack001/njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Plugin/sc2.dll unpack001/njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/WinMM.Net.dll
File Explorer
-
njRAT-Platinum-Edition-RuS-main.zip.zip 16.2MB
-
njRAT-Platinum-Edition-RuS-main/README.md337B
-
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/GeoIP.dat1.1MB
-
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Mono.Cecil.dll.dll 305KB
-
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/NjRat Platinum Edition.exe.exe 12.8MB
-
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/NjRat Platinum Edition.exe.config.xml 1KB
-
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/NjRat Platinum Edition.xml4KB
-
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Plugin/cam.dll.dll 63KB
-
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Plugin/ch.dll.dll 85KB
-
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Plugin/mic.dll.dll 49KB
-
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Plugin/plg.dll.dll 28KB
-
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Plugin/pw.dll.dll 39KB
-
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Plugin/sc2.dll.dll 12KB
-
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Sound/Sound.wav680KB
-
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Stub/Stub.manifest.xml 487B
-
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Stub/stub.il659KB
-
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Terror/01.gif.gif 422KB
-
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Terror/02.gif.gif 676KB
-
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Terror/03.gif.gif 241KB
-
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Terror/04.gif.gif 297KB
-
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Terror/05.gif.gif 305KB
-
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Terror/Scream.wav42KB
-
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/WinMM.Net.dll.dll 43KB
njRAT-Platinum-Edition-RuS-main/README.md
- SHA256 37837a0fc2489133cf692dcf756379729e570e7a82602e683dae77700d820142
- MD5 60cbf75eb517cbf66edb545c066e8e11
- SHA1 03fb2da3f569f19fe847dec8517939d7420fe3fc
- SHA512 a207f3157defd9a1bb2eebdbde7a141ebf2b6c8956f8ec764889f6021d64939f3b9de05e1c02ff8ccccd4e6fa08374c808586ceefd07fd2b403197d9e91ea17e
- TLSH T177E07DF32D22068D2947E79698DA1586D33484EA4B41CF28F9794A22000393B227DD3A
- MD5 SHA1 SHA512 TLSH
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/GeoIP.dat
- SHA256 b4bfd1ebc50f0eaab3d3f4c2152feae7aa8efad380b85064153a6bfd006c6210
- MD5 a0a228c187329ad148f33c81ddb430bb
- SHA1 d70ec83d1b15b3156df73802dd1bec024b1b9346
- SHA512 0fe0a62c07f7ade0e6bfac8843c13c055369177935d801488a993bc4bcdb9da220ba1b37df2027dab8af7c15e5cf00b3e8f223b12165d8a1b0b9c30dc9939332
- SSDEEP 24576:WUH7rp/TXKHJBjsN0wjAu6e3akVX7k+k7bKnz+AHxOxaz+hnV647KyMLh:WUH3p/TKpBjs0b+akV4+C0axaz+ZVL7o
- TLSH T129358C22FF0696DBA9413D9EBD189EDC18148DB9FD071339625E379C60B8374CCC26A6
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Mono.Cecil.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cdadc26c09f869e21053ee1a0acf3b2d11df8edd599fe9c377bd4d3ce1c9cda9
- MD5 851ec9d84343fbd089520d420348a902
- SHA1 f8e2a80130058e4db3cf569cf4297d07d05c93e0
- SHA512 5e1d1b953fda4a905749eff8c4133a164748ba08c4854348539d335cf53c873eae7c653807a2701bf307693a049ae6c523bd1497a8e659bdea0a71085a58a5f1
- SSDEEP 6144:ueMQM/aMOZabe3h1PtRjAqmYVNf3yTXcYBbt6KMBhu:uF/aMDb8BtRjA7XcYNclB
- TLSH T1D46429185AEC5B3ADD6F97BFD0E6581183B0F0126643E30E4BE4B2B22CB3761C95255B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
318190
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\njq8\Desktop\jbevain-cecil-0.9.5-73-ga5ffcc0\jbevain-cecil-a5ffcc0\obj\net_2_0_Debug\Mono.Cecil.pdb
mscoree
_CorDllMain
Name
.text
Size
303KB
Virtual Size
302KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
824B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/NjRat Platinum Edition.exe
- IMPHASH 319b1edcc4538be377f43066c635ffef
- SHA256 2e5ffe5cf873b38a0776e3ccde20e9558004175c13a093589a5d4748fd0da6f9
- MD5 57fb06a1f0044d6f0ca78e18f5795d7c
- SHA1 9139d759ab9c1c8e42f23199cf9c4faf409df3c4
- SHA512 21ac425bc50efa5a0b9efa54a392f3e394901cadbf3b213c977e2602f88a544216f661b85b1307b9e67597e7efbf4e3b80d8758aa2b7ef8d74ed0c90c6c92689
- SSDEEP 196608:fQX49tLUDMrympDCQ1sd9jK7tDP+NIqo6W7TI3CchEHVi/PyKhKlMy46My2HT:k0LXrympV1Oedrqo7m7hEHV9BxMhHT
- TLSH T16BD6332AE8548C30DA3139FF195162A7692EAD0007915DC77BF9B007D9F56A3CF24F8A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
94016
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\Projects\WinRAR\sfx\build\sfxzip32\Release\sfxzip.pdb
kernel32
GetLastError
SetLastError
FormatMessageW
GetFileType
GetStdHandle
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
SetFileTime
CloseHandle
CreateFileW
GetCurrentProcessId
CreateDirectoryW
RemoveDirectoryW
SetFileAttributesW
GetFileAttributesW
DeleteFileW
MoveFileW
FindClose
FindFirstFileW
FindNextFileW
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
GetModuleFileNameW
GetModuleHandleW
FindResourceW
FreeLibrary
GetProcAddress
ExitProcess
SetThreadExecutionState
Sleep
LoadLibraryW
GetSystemDirectoryW
CompareStringW
AllocConsole
FreeConsole
AttachConsole
WriteConsoleW
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
LockResource
GlobalLock
GlobalUnlock
GlobalFree
LoadResource
SizeofResource
SetCurrentDirectoryW
GetTimeFormatW
GetDateFormatW
LocalFree
GetCurrentProcess
GetExitCodeProcess
WaitForSingleObject
GetLocalTime
GetTickCount
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetCommandLineW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
GetTempPathW
MoveFileExW
GetLocaleInfoW
GetNumberFormatW
GetOEMCP
DecodePointer
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
QueryPerformanceFrequency
GetModuleHandleExW
GetModuleFileNameA
GetACP
HeapFree
HeapAlloc
HeapReAlloc
GetStringTypeW
LCMapStringW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetCommandLineA
oleaut32
VariantClear
gdiplus
GdipCreateBitmapFromStream
GdipAlloc
GdipCloneImage
GdipDisposeImage
GdipCreateBitmapFromStreamICM
GdipCreateHBITMAPFromBitmap
GdiplusStartup
GdiplusShutdown
GdipFree
Name
.text
Size
164KB
Virtual Size
163KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
42KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
215KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didat
Size
512B
Virtual Size
376B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=241, version=40116,
count=141, id=243, version=40116,
count=24, id=242, version=40116,
count=2, id=253, version=31616,
count=19, id=260, version=31616,
count=22, id=259, version=31616,
count=50, id=261, version=31616,
count=11, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=264, id=1, productName=Unmarked objects,
count=38, id=261, version=31630,
count=1, id=256, version=31630,
count=1, id=255, version=31630,
count=1, id=258, version=31630,
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/NjRat Platinum Edition.exe.config
- SHA256 c45c9d1d30f940289498be2af978d74178a5c24ceb7755c2648f6c7a89353813
- MD5 da15a1d8d770b57356ddd384342b3034
- SHA1 b03d6cb907c139492c7b914147a498b31ef839fd
- SHA512 3cf7dd0d14244c543e3442873ce7e495ade87ad906a42d53f3b38180ffc453bd74ae022b91306445d359475dbee4caa1514c4e913e823d174b8470b45fed7cfc
- TLSH T1FE21CE45A5D08CB5466396636A544EC0FF364B9F724C154CF8DEBA9B8F3342C4707192
- MD5 SHA1 SHA512 TLSH
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/NjRat Platinum Edition.xml
- SHA256 25fdf1bf3806ef92e022c6085f63d44ee314764cb053b9456ad0c8d86abd1301
- MD5 0f2ee4833bfbf61f404bb982c40ba249
- SHA1 b3559917b919bf8dc2067ebc5f72a5b9b45e6ccd
- SHA512 971f5f58e09d49ab4a544146dcda7b2594efaa3531ac9b005edd5c362585912a6c5ab78eec99eecf39b0f4056c155d5918a66eafc7cb11e1c8f758def0b255ee
- SSDEEP 48:3CsG8vgH0cJPcJ6cJFcJ4cJTcJocJzjcJlcJanUycJQc7afgkccJYocJUvBUMmu4:3i0q/o1KlsU1tC+G6Weyn9dIyKqV
- TLSH T11CA166468767EF390D3411BB7EB0B5C024635E22956C280EE8AA1C7347D22DA36FBE54
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Plugin/cam.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8aeec9c0a673f2043bec795d8430c280392913ac275fbaa3380524ad2148eaf8
- MD5 b0f1130c6da19dbdb8556f910f168420
- SHA1 e09ffdb725dc2ca0bc28a58a4615c0f3bcf08adb
- SHA512 4d97ac1ec120120c22d2fa39c3bcdafbaf6796da4742154323860ede74a56fffadfd3734b2fcd37e60ea0334e951e3c2d7b05c52235db89bde3fa2a1424224fa
- SSDEEP 1536:SwmVRUhn1vP9QJwnXusCEtsIbepigBULPqa:SwmYZ1WJQIEeIbepigBy1
- TLSH T15853392A2B98641BC58E577C90B30F0003F0D65A7623EB8A6F7961BDDD723944B173A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
70926
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
512B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Plugin/ch.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 47f7c69c4cc4c0feb6a6f1730d697ca95e24d5cedd490c31d8e30cd1fa3b3859
- MD5 9000a99ee61e1c87fb811a77df2e7b91
- SHA1 61a026acdbeea3c8e68a55bce7c4803aa678adbb
- SHA512 d45a1e2530143dab919b892b7e21657a2e6e62533046d75aa787da9ad012b73245aa033de5c169aed08a66fb117be1df1f87253cb4e49cf9b47b89e58d799c15
- SSDEEP 1536:buvVvVdtKqzOR6ergb9hZwh4nXVtn+99p4oG0CEI81:YVvjt1bbA4nX+vp4oo0
- TLSH T15E839D0ABB8AE3E3DA6E0A785021561103B6DD204E33EF677D9D349AD5737540F79360
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
92446
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
82KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Plugin/mic.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7bae6ec2613874287c20ddcbdf75e7cca0ac65132485dfcfd632d0e5f97c1719
- MD5 e9214452435d0e6f782b545ec0123331
- SHA1 1705609d15c0c7cab4ebcb28f082cfcb8e1f80ac
- SHA512 05cbe650b1ed26193128cba8d58fbe4c96ccb5931d877a6937e4a442f74412fd3cdda46b5cff4390a71133cba4c10c778377988c657eebfe5e631ae4f445ebce
- SSDEEP 768:F6YK5hvcdWNbu/GemZgXEFajkt22rB7BJodsx7fuhwWFTxqPbqgmB:F6/xemZgY9V7Jx7fvWFTxqPb7m
- TLSH T16333D6507EA41CBAC16B067DACE61112F6B18D68B227E76B1CFD60F758833DE86406F1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
56430
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
47KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
512B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Plugin/plg.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bd5a390efa75b9a47077fa1e7558713842563ec5822eb7f1dbf35ad9020012dc
- MD5 4643db3dbf75200efa97e80cfcf2da1d
- SHA1 cd65423fbeb54a82f1312ad96c848a261047ccba
- SHA512 ccacfcf1e9325ee3dba0556cc527eae2b856531a7d963072181549e3e76395d42be27206f0312a5fa30d8d35df75a64382a399fb61c26cef703671fe21fb25e9
- SSDEEP 384:uLPMDSXbwv1qppRt9LmCfvEk/LcEf6snTlC3/b3DP0lpm+x6dzWxQpbiqWz5matX:48tyRt9LmCfD2j3rc+KUbkoa+h
- TLSH T1BED2B40D2BA5C42AC37E47355D6643224AF3421B4915EE2E0CDF8EED1BA37C84B85A5B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
35342
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
512B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Plugin/pw.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a3e4bee1b6944aa9266bd58de3f534a4c1896df621881a5252a0d355a6e67c70
- MD5 db87daf76c15f3808cec149f639aa64f
- SHA1 d67f84a44ddc25432ce179aeba9cff778af746ee
- SHA512 ad7dc75254180ff7c988b7f394ad76b696384002457d558469d2c6401dd97cba54c532245bb555ab28d2beda3ab504736bb2b89040a21ba6598929392daab473
- SSDEEP 768:fqcFOkBO3jzamnEjt0Wp8em0nktiwRnKSg42+:fvg3jumny0Wp8em08NBgG
- TLSH T10F037D067BC69301EABD8FB51CB281444372D28F5D13E79E1CE988F42B76B900955BEB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
46542
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
37KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Plugin/sc2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8e816523110bb2ab5e7611c0322cc4aa2d6c8d2a899b3a03731965ed1644549b
- MD5 801a5d1e272399ca14ff7d6da60315ef
- SHA1 e546ef8f00d96404823a1ed242ed7b56167da2f7
- SHA512 32eeb2302cfe06e996f2d729d440fc2796d16e33fd9d793c5eaf379e8450d67e177d5c254721c6fd5636c92e55439054b982e0820a757ebd5e65584d3f0c739a
- SSDEEP 192:0SDIUapMH4ftIjPPjb3DX8oB2/mZLkM0Lj08Lt21TGzRpy7yNVILDB61d+ZMt2jt:0SDi+4lILL6/IQM0n0881TE3y2QXM1dY
- TLSH T18A42F70DBF18C217E65C0BBD116357259376C05B1303FF2B9EC9A4F7A8AA3C26658399
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18814
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
512B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Sound/Sound.wav
- SHA256 9430fec62eb1bfecb35f4a9ceb2ddd5ce6294751cde85fd7169c8def811af49e
- MD5 11ca5b5feba113ccf66d6649b5b3cb40
- SHA1 503f3a2a449b195d6e71237fba623c3a7b5a08fa
- SHA512 2183286132157f0122b1c8cbfbf0ccf49cf59ca033453d983fb4e25850203e1c03beff98bf99580b20c8049180d4afce339680ba70e1bd7c5a95f859afa70da3
- SSDEEP 12288:3435BUAwzT1eE7M9oxyAdP9qc1lHQJg6j4DUZTkznCBtt+doeUnk:3i/UAWkEkoxbl6grUBH3EoeUk
- TLSH T1F7E423E6E031FE10F8FC067769C10D44AB21BA495D172FAD7438D6A929B334339197AE
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Stub/Stub.manifest
- SHA256 835a00d6e7c43db49ae7b3fa12559f23c2920b7530f4d3f960fd285b42b1efb5
- MD5 4d18ac38a92d15a64e2b80447b025b7e
- SHA1 5c34374c2dd5afa92e0489f1d6f86dde616aca6c
- SHA512 72be79acd72366b495e0f625a50c9bdf01047bcf5f9ee1e3bdba10dab7bd721b0126f429a91d8c80c2434e8bc751defdf4c05bdc09d26a871df1bb2e22e923bf
- TLSH T16EF0DCC1D188CA6AD73042A13A66E410A2AD435B19DD49EC74DC2ABB6F0BAC680C30F1
- MD5 SHA1 SHA512 TLSH
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Stub/stub.il
- SHA256 4eaa0830f3a6b72e6380875b82c28fc48d22d3c14ab2adab87e2deafdbf19ea8
- MD5 8a1ea88a0ce54fbe8a85aedc751e0edc
- SHA1 2e3622edeaa569f4b38f740f593f4bd9f913c97a
- SHA512 e01a5511b9e21610d3e2e325fbf15068432dda6dbc976ca7395ad9c3e2d8a91883be813db75339d51e0bd5ea7c23a9c37c9b7e7384399489b21d15d953397f64
- SSDEEP 12288:kPY73AmnxaCpY4uqmXSxyosK+M8K2J2SzsWBpyP2KGLLGGjVVc0t3L5v7eWcwgZv:8pgT
- TLSH T129E4ED2943289989D5B2601DBE72CB46F77F52270E71AC963CEFC654FF32189427423A
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Terror/01.gif
- SHA256 cbc8a31345ac302681cac85e5347de1ffcbaa12bdc50c679ecf99cda7fc5157e
- MD5 705a10144ffd51597b863af7b6dc6761
- SHA1 68e3ff4a0c5c498e958431cc4379f33042900194
- SHA512 00685116a9471c2f95534932eedf29e70c0486cdb16235770ff3ab8655396ead19378c29f57f298ac2d17e202ed8e75b4ecab282a1be4cb40dd27774568107a3
- SSDEEP 6144:T291eyhNrmabJq3z2MHrM3r5O03HWMofchjgHy5r6vUlxWXPYt5AmvwCPr5Pn9GT:ToJUaGHrMbS1khjgHHOiQHAmvt9n9yuW
- TLSH T1F394230AD248D4B05BD858FC3434E0EB8FE8F3A895BFBA7310461AA1E551053FE96D55
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Terror/02.gif
- SHA256 94333c1e9a0961648a33db91f9e453e65b25e40106db6b639637fbedcc05e2a6
- MD5 830902dd51dad22083b885a7b51ac3cc
- SHA1 a5cfc3391721b40f4c6219f7644628116ef0ae71
- SHA512 9d409da6f1eba7041726df402ae2fb183e320a5bb81fd3837f6f4b67a88b628d4f571f7e1e2df33d0357bea396683036e9af6c2acac1d9e9931f6faf607cdd8b
- SSDEEP 12288:RNvP2rOQiVfaMkS5yKnO8zhk/rJyALyMCnHuqb2kkWy/jdV/OsdQ1:RNXcLMy8ziJyrMAO+nJyP/Osm1
- TLSH T1E2E423C3C7E13378EA1EE1B8494D8754C20BC8B45B701BB9398879AFBFA11392301DA5
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Terror/03.gif
- SHA256 b4bc127b5d66ab018235635fc12fe65d6ce97f9f8350e965213d9dca9264da45
- MD5 5a7b5ec0c06f5cbe1e04dbf070c510fb
- SHA1 8376a1e841035cec698bc1711672e7dba79aaf87
- SHA512 336f830d2ebe82ed782f1a9881a87f2726ef33e26a1659875ca346c8c8b325ec65cbb55ad8fcaaeb5da58865bb79a2d03192cb0fe75fe9be77da41b2537df2df
- SSDEEP 6144:8p3sCQ1AWnK1NOZ2l8iQojWaCZ0pak0l1aNmN4/nzx:4i1Az18YDQ1aq0ok0d+nzx
- TLSH T157341299DE97C513D28C9A767AD3840A4C5E04F02797BD5C7AC88D9CAD4CC232A8F4DE
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Terror/04.gif
- SHA256 8d070d9c04be926f34064e585edc84c8837bc4476eacde6b046e855d213f48fc
- MD5 c29a3be5142c2304ec7b8a6d8a4fe0f1
- SHA1 2df712ce87e022d9c69e3bc9f4e17822840715f0
- SHA512 62166c06c7e340d779670a75654fe4538133d1f0022a9ae4869192375ca6133802c006fabe0f67d1c7f155a13d6e28f70a3f9c199927ad628227e744d454728b
- SSDEEP 6144:PXt50HhZafhJ2zcDk1DeNxwO4xh0bRaFIVYGE9Gt2DcBV:PXeofhLA1DAwOJjVYB4ucBV
- TLSH T1CD5423F11B1D2849C45C6F61B8070AC26E2294E7832A6F590F23E654F4F77B486AE72C
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Terror/05.gif
- SHA256 57f082caa1766e60c46f69300475be4e6dee3e0330ff329e3ceec3d5bce69dda
- MD5 44290f48408be4840de97bed814fe8df
- SHA1 8bfe3baad8cd4fbb6b3a1374a3b1f6123f42706c
- SHA512 3139d77e9e626a45cd7faea5d5fcdfb7d7758b4a940e31e593bc9bceb999426418cfc690c2568776e659abfaf2733e96813470b21838e0a6c0740c07073aeb2e
- SSDEEP 6144:gHzZv+LGCkXOqNzD9EXJoMGNXMOJIABS8U+A7IZAabW0Hu38g5Tqk:4zZvykpDwJoMO861jAaPHuMgp
- TLSH T18D6423C343209ED2ED9225F9B306AD3674271CE3B12E83D286E4285644ADB71DEFDB45
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/Terror/Scream.wav
- SHA256 ee9567223d773a67e8797005ba60fa2c1e672a6cff9b210f76240dcd9a16dd49
- MD5 d4a1c2e18d1dcc4c2e71e6297bf5cccb
- SHA1 89143c582be0767a07323813581599de3267b68e
- SHA512 6af431456112867cb840d2e55237b1d7c05161231ec4ae4c8682ad810731ce3a9544966794b3543dbbf499fdbd2c65242febd27ca9938b40047083beb30bcb0a
- SSDEEP 768:DeUJ+CNzdLn5+ZVvjyQu7J/41yQWLZg/dvvD83IzqovOxd9B/0PYoh7N9oFW23rp:DeUJ+CdYHyA1wLZg/dHDgsqovOxd/cPy
- TLSH T18813395FF192F4468D0BCEF9FEFFC428B113D8819D898E88750873596074461AAAF64B
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT-Platinum-Edition-RuS-main/njRAT-0.7d-Platinum-Edition-RuS/WinMM.Net.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 59e2ac1b79840274bdfcef412a10058654e42f4285d732d1487e65e60ffbfb46
- MD5 d4b80052c7b4093e10ce1f40ce74f707
- SHA1 2494a38f1c0d3a0aa9b31cf0650337cacc655697
- SHA512 3813b81f741ae3adb07ae370e817597ed2803680841ccc7549babb727910c7bff4f8450670d0ca19a0d09e06f133a1aaefecf5b5620e1b0bdb6bcd409982c450
- SSDEEP 768:LyasDzF2TDSemqD9tGI+ffwj2Au0LVpqmf7KxcOOrYCPTxqPb85:LyaXKemqD9tGI+ffwj2Au0LVpq4KWrlv
- TLSH T1EB13B60479A85CB9CB2F013D6CD61211FAB18D647227B62B1CBE70F318977DE9A41AF1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
50302
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
41KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ