njRAT 0.7d Horror Edition.rar
- SHA256 de45a4a02445ee79075e835b94c39f75a10ece2c69a737786018e2c2f1d6bc58
Password
XP
Static task
static1
1 signatures
General
- Target njRAT 0.7d Horror Edition.rar
- Size 16.3MB
- Sample261023-2fs35adg52
- SHA256 de45a4a02445ee79075e835b94c39f75a10ece2c69a737786018e2c2f1d6bc58
- MD5 a1b3ad5f02c8def3ec020c4ade1d2f8d
- SHA1 1b8cb0d31a3405aed0d28523dad874805c62768e
- SHA512 017f5ac8e499fea1b81c967d2856722a1d75e90bb3baf911dd2aafb692f82af48c241dc1ae676eb9c3e19f64854303dad36d74f04110c2c3d7171bf34ba7d384
- SSDEEP 393216:SMvKQs0TcJTrGSkEyt9THylk7kmN+FXf7gZS5j/aWcA3:1vKQyJTjkx9jyMoXf7cStao3
- TLSH T1450733653E5162FB93378352B9A7CB00600E56A77F34D78B40B86D3C65813EA08BE5DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 22 IoCs
Checks for missing Authenticode signature.
resource unpack001/njRAT 0.7d Horror Edition/NjRat 0.7D Horror Edition.exe unpack001/njRAT 0.7d Horror Edition/Plugin/Clip.exe unpack001/njRAT 0.7d Horror Edition/Plugin/Lock.exe unpack001/njRAT 0.7d Horror Edition/Plugin/Screamer1.exe unpack001/njRAT 0.7d Horror Edition/Plugin/Screamer2.exe unpack001/njRAT 0.7d Horror Edition/Plugin/Screamer3.exe unpack001/njRAT 0.7d Horror Edition/Plugin/Screamer4.exe unpack001/njRAT 0.7d Horror Edition/Plugin/Screamer5.exe unpack001/njRAT 0.7d Horror Edition/Plugin/Screamer6.exe unpack001/njRAT 0.7d Horror Edition/Plugin/cam.dll unpack001/njRAT 0.7d Horror Edition/Plugin/ch.dll unpack001/njRAT 0.7d Horror Edition/Plugin/fun.dll unpack001/njRAT 0.7d Horror Edition/Plugin/mic.dll unpack001/njRAT 0.7d Horror Edition/Plugin/plg.dll unpack001/njRAT 0.7d Horror Edition/Plugin/pw.dll unpack001/njRAT 0.7d Horror Edition/Plugin/sc2.dll unpack001/njRAT 0.7d Horror Edition/WinMM.Net.dll unpack001/njRAT 0.7d Horror Edition/extracted/Res unpack001/njRAT 0.7d Horror Edition/extracted/Rpx unpack001/njRAT 0.7d Horror Edition/extracted/Rug_Packing_Reflection unpack001/njRAT 0.7d Horror Edition/extracted/dotNET_Reactor unpack001/njRAT 0.7d Horror Edition/extracted/mpress
File Explorer
-
njRAT 0.7d Horror Edition.rar.rar 16.3MB
-
njRAT 0.7d Horror Edition/GeoIP.dat1.1MB
-
njRAT 0.7d Horror Edition/NjRat 0.7D Horror Edition.exe.exe 15.4MB
-
njRAT 0.7d Horror Edition/Plugin/Clip.exe.exe 13KB
-
njRAT 0.7d Horror Edition/Plugin/Lock.exe.exe 16KB
-
njRAT 0.7d Horror Edition/Plugin/Screamer1.exe.exe 844KB
-
njRAT 0.7d Horror Edition/Plugin/Screamer2.exe.exe 345KB
-
njRAT 0.7d Horror Edition/Plugin/Screamer3.exe.exe 280KB
-
njRAT 0.7d Horror Edition/Plugin/Screamer4.exe.exe 961KB
-
njRAT 0.7d Horror Edition/Plugin/Screamer5.exe.exe 997KB
-
njRAT 0.7d Horror Edition/Plugin/Screamer6.exe.exe 583KB
-
njRAT 0.7d Horror Edition/Plugin/cam.dll.dll 99KB
-
njRAT 0.7d Horror Edition/Plugin/ch.dll.dll 44KB
-
njRAT 0.7d Horror Edition/Plugin/fun.dll.exe 8KB
-
njRAT 0.7d Horror Edition/Plugin/mic.dll.dll 77KB
-
njRAT 0.7d Horror Edition/Plugin/plg.dll.dll 65KB
-
njRAT 0.7d Horror Edition/Plugin/pw.dll.dll 284KB
-
njRAT 0.7d Horror Edition/Plugin/sc2.dll.dll 46KB
-
njRAT 0.7d Horror Edition/Stub/Admin.manifest.xml 498B
-
njRAT 0.7d Horror Edition/Stub/Stub.il566KB
-
njRAT 0.7d Horror Edition/Stub/Stub.manifest.xml 487B
-
njRAT 0.7d Horror Edition/WinMM.Net.dll.dll 43KB
-
njRAT 0.7d Horror Edition/extracted/Res.exe 997KB
-
njRAT 0.7d Horror Edition/extracted/Rpx.exe 147KB
-
njRAT 0.7d Horror Edition/extracted/Rug_Packing_Reflection.dll 11KB
-
njRAT 0.7d Horror Edition/extracted/dotNET_Reactor.exe 5.9MB
-
njRAT 0.7d Horror Edition/extracted/mpress.exe 101KB
-
njRAT 0.7d Horror Edition/icons/10.ico97KB
-
njRAT 0.7d Horror Edition/icons/11.ico80KB
-
njRAT 0.7d Horror Edition/icons/222.ico17KB
-
njRAT 0.7d Horror Edition/icons/33.ico4KB
-
njRAT 0.7d Horror Edition/icons/5.ico27KB
-
njRAT 0.7d Horror Edition/icons/60.ico21KB
-
njRAT 0.7d Horror Edition/icons/Boo.ico64KB
-
njRAT 0.7d Horror Edition/icons/Crazy.ico2KB
-
njRAT 0.7d Horror Edition/icons/Luma - Blue.ico73KB
-
njRAT 0.7d Horror Edition/icons/Luma - Yellow.ico69KB
-
njRAT 0.7d Horror Edition/icons/Mushroom - Boo.ico59KB
-
njRAT 0.7d Horror Edition/icons/SETUP01.ICO766B
-
njRAT 0.7d Horror Edition/icons/SETUP04.ICO766B
-
njRAT 0.7d Horror Edition/icons/SETUP06.ICO766B
-
njRAT 0.7d Horror Edition/icons/SETUP07.ICO766B
-
njRAT 0.7d Horror Edition/icons/SETUP08.ICO766B
-
njRAT 0.7d Horror Edition/icons/SETUP09.ICO766B
-
njRAT 0.7d Horror Edition/icons/delphi.ico766B
-
njRAT 0.7d Horror Edition/icons/hydra.ico39KB
-
njRAT 0.7d Horror Edition/icons/installshield.ico2KB
-
njRAT 0.7d Horror Edition/icons/jpeg.ico117KB
-
njRAT 0.7d Horror Edition/icons/jpg.ico96KB
-
njRAT 0.7d Horror Edition/icons/mp3.ico60KB
-
njRAT 0.7d Horror Edition/icons/ms.ico24KB
-
njRAT 0.7d Horror Edition/icons/pdf.ico79KB
-
njRAT 0.7d Horror Edition/icons/ppt.ico74KB
-
njRAT 0.7d Horror Edition/icons/pptx.ico59KB
-
njRAT 0.7d Horror Edition/icons/realtek.ico281KB
-
njRAT 0.7d Horror Edition/icons/setop.ico97KB
-
njRAT 0.7d Horror Edition/icons/setup.ico4KB
-
njRAT 0.7d Horror Edition/icons/themida.ico20KB
-
njRAT 0.7d Horror Edition/icons/vbs.ico1KB
-
njRAT 0.7d Horror Edition/icons/windows.ico172KB
-
njRAT 0.7d Horror Edition/icons/xls.ico57KB
njRAT 0.7d Horror Edition/GeoIP.dat
- SHA256 b4bfd1ebc50f0eaab3d3f4c2152feae7aa8efad380b85064153a6bfd006c6210
- MD5 a0a228c187329ad148f33c81ddb430bb
- SHA1 d70ec83d1b15b3156df73802dd1bec024b1b9346
- SHA512 0fe0a62c07f7ade0e6bfac8843c13c055369177935d801488a993bc4bcdb9da220ba1b37df2027dab8af7c15e5cf00b3e8f223b12165d8a1b0b9c30dc9939332
- SSDEEP 24576:WUH7rp/TXKHJBjsN0wjAu6e3akVX7k+k7bKnz+AHxOxaz+hnV647KyMLh:WUH3p/TKpBjs0b+akV4+C0axaz+ZVL7o
- TLSH T129358C22FF0696DBA9413D9EBD189EDC18148DB9FD071339625E379C60B8374CCC26A6
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT 0.7d Horror Edition/NjRat 0.7D Horror Edition.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 7e3f7d005480ab3b1f694acbab8ced2f9ccd400feacac0d16b1563f243d9a801
- MD5 ca8ea727d524bbcea3e7381bff63e1d1
- SHA1 0e9c0fb26e198af8f54c7838a7ae462a0d1cb2da
- SHA512 04beb9d7c57ca13b74826027fdf11e7a3ad274e301ac74e19b62bce4692970a1ca558c534d1028282ab45859b45a4c8906946ae48da69d02496cd043078b927d
- SSDEEP 196608:nRw3r2kYvaKqgAyoSxX3NYeOu2kYJBnnim//7uVtFZ03MtV0Poiv5m:cHZgA+9ecWBnnim//7w03M4Fv5m
- TLSH T186F6AD02B292D911E07E56F4D6E28BF606B5BD0EE935827725903F29BDF27C16C027C6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
XP
Minor OS version
0
Major OS version
4
Entry point
16137342
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
15.4MB
Virtual Size
15.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT 0.7d Horror Edition/Plugin/Clip.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 88b7a47f63f149d273015f4f6ce9ef8c5a731b6cf19db7a95220298603000b8c
- MD5 fd829592c5abc1361c2f5e81b2678019
- SHA1 91b6d23bc43332bb7fee1b2d924a5c26a86747e4
- SHA512 4e3e3b3cbfc2c25ac23399d15dcb6e7b40e5572fe9e5e741152f20589cd94de390fe0bea4abfb53ff427c6dec366d41a43a3a67ccdbb34c139f781be0b6b6c34
- SSDEEP 384:Gr+hl2K2kTjnbkHWUWb1Lc4WrYk90/RxLKNrw:GrYSWUWbJ5//KNrw
- TLSH T15952181153E5C37BCDFF1AB15C73A78202B1DA469526DB6D98CC905A0EA338807D3BE1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
XP
Minor OS version
0
Major OS version
4
Entry point
19186
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT 0.7d Horror Edition/Plugin/Lock.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 c9f03a39789f7322ae43604db6ce7da86765ad4b13207091683cf47bdea8de12
- MD5 683bcb1f86f4410931abe39a63eb7057
- SHA1 d338aac5ff479fc94d3c840e862665de1dac8c8f
- SHA512 60b596947d93fdb196fcf338af92d26cdd82396283316352ead078ce1a85943bb85264901318f7061e6b0e49058ace521831a9275c025526373d9168c757cdd2
- SSDEEP 384:wi9N5yF4C0n7QLweis5rul02mXlBbVVaXI:wi3kWv7UB92KaXI
- TLSH T14F7228A18398D37BC8FF1FF68D73220006B1C7514917DFAD5C9D616A4AA73588383BA2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
XP
Minor OS version
0
Major OS version
4
Entry point
22078
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT 0.7d Horror Edition/Plugin/Screamer1.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 00201a2fd4916193c9c7bbba7be6a77fa5876085480b67da4e1228fd8b23ae5f
- MD5 8cac1595b184f66d7a122af38d5dfe71
- SHA1 e0bc0162472edf77a05134e77b540663ac050ab6
- SHA512 88d3753ce73bbf95ee1fdbdff21eb9331e59ca92cfa5c489f141c07dc90871e3032e331c9dd77b1fec4522add3ac25c51d5c699d7801a5343dd2ae447c60f8f8
- SSDEEP 24576:Twbdh4Y2uoLtciBtgFD3O7iPTr8pYocr6x:T212uohceaYg
- TLSH T13E05DF67E0040E32C499933E2863773243345C28EF670B2456D8FD696ADF9F86769BE1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
XP
Minor OS version
0
Major OS version
4
Entry point
870286
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
842KB
Virtual Size
841KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT 0.7d Horror Edition/Plugin/Screamer2.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 c1badbacd2abe44fe4e8685c8eee7e983bf8b6780cfca03ae31f8fcebc98b1fb
- MD5 8efb7339fe13cf8cea9f6445776655c0
- SHA1 081afd73c757c83825cf1e8ed4a4eab259d23b97
- SHA512 2a37e74aeff17b4f435d02a30019a017a4ff4fa29fc898229f6195876f53b38154c063cf052deebcc06785650f875d67eeb0de372a76df3c4e71bd4fc0392956
- SSDEEP 6144:1sp3sCQ1AWnK1NOZ2l8iQojWaCZ0pak0l1aNmN4/nzNRH91FHlHH:1Ii1Az18YDQ1aq0ok0d+nzN
- TLSH T182745A27E1050E32C488833E64A3A73547244C29FF670B1466C8FDA86EDF9F4675ABE5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
XP
Minor OS version
0
Major OS version
4
Entry point
358726
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
342KB
Virtual Size
342KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT 0.7d Horror Edition/Plugin/Screamer3.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 5dc4f19b34a738b4eef99c1229b2c7e7492040819d92ddbbf52bbde2a600c2ed
- MD5 dedabad13c1c4cc92c4ed2122473eb8a
- SHA1 a13385641ddcbdc371dce3607381883d52ed9822
- SHA512 45b66665cb3e484c82775c9972f444b1d8fe6f7ef5a55185a3c071f84e9f5dd2a039c9f9e26392e950585cbf965b987df9c789106bddcb35ee55ad0ff91b190b
- SSDEEP 6144:gk8SnpZqjGNklsppH1eSqkeJRH91FHlHH:gvgZqJmTeSqkeJ
- TLSH T192541727E0050E32C889833E5463A73647204C29FF670B1466D8FDB86ADF6F46B59BE1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
XP
Minor OS version
0
Major OS version
4
Entry point
292086
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
277KB
Virtual Size
277KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT 0.7d Horror Edition/Plugin/Screamer4.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 0d635f035cdb2fd3afda768cd631481ff980957b614a3cf3fca6c592c6c06470
- MD5 4723c3c04794c09bbcb6e03f48440f15
- SHA1 a5ef69c9dc9eacc2099d9c239146a0e360f1837f
- SHA512 5b68e1cd3d6bb85b5f449014cc288423faea76ff0ecf8834047dac1ed6e84c4d858a7ed23abe3625d781391f636893736bf5c00474ad0995e75611c1557c5c4a
- SSDEEP 24576:V1ubnylucMp90zjW7tDVF/ZeHr7aNnX/Xq7PU:V4bnylucasuDNnX/q
- TLSH T16F25EF27F5010E22C889933E6463B73553204C18FF670B1466C8FDA869DF6F8A759BE6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
XP
Minor OS version
0
Major OS version
4
Entry point
990054
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
959KB
Virtual Size
958KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT 0.7d Horror Edition/Plugin/Screamer5.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 8929d3b749ff91527b8e407eff6bde4bb0bb27739313b5c0db0434cbf700dbfc
- MD5 28aaac578be4ce06cb695e4f927b4302
- SHA1 880ab0560b81e05e920f9ec1d6c0ecf5e04eaa7e
- SHA512 068698bda0543c773b36830f6760456e40e9046d9d20089ad88cb646ef5c7bd6c6716c6d59cfc7abd5bffb9129f5a7076e2f9c9b321795f224923f00b7b91374
- SSDEEP 24576:xcWLYmbwnSTHLmB1wS7pmYSOryHwC6FEUQ09E4a66:xFsoHSXw2S7wCqJ3
- TLSH T1F825E06BE5000E32C889833E5473B77543208C29EF670B1466C9FDA96ADF5F86719BE1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
XP
Minor OS version
0
Major OS version
4
Entry point
1026774
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
995KB
Virtual Size
994KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT 0.7d Horror Edition/Plugin/Screamer6.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 d88f5b00da5f05ab7f55fd7c414bb56aaf47e9f51365aaabd71f3ace3cc77523
- MD5 320b1115164e8b5e1316d86eb29cd299
- SHA1 bc046d8b14359a7a2bebdecbb819e76c47d84d1b
- SHA512 fab558cf31aa79caf8e4f6e5649e4e484de3e29bae1386aa61749b70e8c791d74b01fa964501d4755c7688d0420e932f30e36699a2fe4488fae82ee23558afd0
- SSDEEP 12288:Y7ogwYqbE3DMuR6BlTTnn9ZOKp0Ac9fEmtdyaukNU9ad:1gIcou0Tnnjr2fEmDNh
- TLSH T122C4BE67F1050E32C889933E5463A73153204C19FFA70B1466D8FD686ACF6F86769BE2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
602558
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
580KB
Virtual Size
580KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT 0.7d Horror Edition/Plugin/cam.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 881d5afb9aa4799c73e75dcd28587dba85dd844e4137287ea48c6b66525e2638
- MD5 8ce3060686462fc72ece2701caa13e3b
- SHA1 19fc9892200de4db332ddd0c14b4b6fd9a35ccd4
- SHA512 ef38e00b054240a0d4747bfd79db860015ed027735c360de58af6889a69482109ccf74770608a2750542457ac38aa79367431ff6ca77fae44d7e3a7023f33a17
- SSDEEP 3072:31IL2SeOPGmBUMqtZabredepzZxgUPWeJP3:w2Sm/MqueepzZxgQW
- TLSH T12EA3091A77479B17C54C5A78C0EB2B0403F0978A6373E7CA3F6C15ACDE633425E5A68A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
107070
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
97KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
177B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT 0.7d Horror Edition/Plugin/ch.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7032cb496f866ec1c9304f2c3cd8859472168838a11aba1571f51875a75074af
- MD5 11fde8a47647c3bc98d57f3a9f3a97a3
- SHA1 e813c17973e77b7aa22b9f539c3c97c624acafb1
- SHA512 1401f40569db7679014ab282477a5560b3bc6f51284e501e0e878881522db102b448566bae50ab6c1027a196de410a9ac8770dfa2208d14e5dfcc3c05e766763
- SSDEEP 768:BZXGgq41SLdRX0vTeAMtNDkpUrpDwxRcNDfF6a2Txj+izh8RP3ABkP0:72gq41SLdRX0vTeAqNoC9kxmRfgrCs83
- TLSH T1C0238215B2C74723CA1C65B180EF356113F2978A5B33DA9A3D8842FD4ED33529F86B4A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
52142
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
43KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT 0.7d Horror Edition/Plugin/fun.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 57b66a81716e1737e5b8ecff2c269f00e2ca6ffbff88960e973c02f5800037cc
- MD5 ddce53e6a021aa8e146d9fce35e97e53
- SHA1 7a4c69888e821e1d775c899ec5b3fdab267c7fbd
- SHA512 a644892e51a5f09b35b3a89fee6031eeb92eb3ed5e5d05b8e06a96f0348305366f211ee959f94aaedb6f0c59608e49a1c2efb157f09cf520c43fe5455abfee15
- SSDEEP 192:qum1qx/rD8107fvhIW1PnaLyLlYe2/Ya7f:q29rD80fvrnamL7F
- TLSH T1B0F1D8A263D4C2B5DBB60B726C5322800A7AE359895FDB6F64CC91135E7378506E3B31
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13818
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\placeholder\placehodler plugin\obj\Release\placehodler plugin.pdb
mscoree
_CorExeMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT 0.7d Horror Edition/Plugin/mic.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 27528a77e27d02aadecabfdf658b2da638bb0ca2f2c60bdd9d0fd5338c1fc346
- MD5 9b376f0d44995ca15d43f7943a602fb2
- SHA1 18a2bb7d13836256bd5f39089203f18d740669d5
- SHA512 4dfb0c49816e0d0c2f7d0d76081725bd48d3713506ec51ac6c06ae7092908d14e3683d707d6f332505163fb0ade0ee6b50a355cd69c25725e829ebb23a3e93b2
- SSDEEP 1536:ZAwSxproATOoeQHshYNR1zTTxqPbKhOCjXKem:TSxpr/KoemAYxTTxqj
- TLSH T17873F814378B1E76C42A09BA58C73100B3B25F997337E61A2CAD11EF5D433DB9B44AE9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
84142
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
74KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
177B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT 0.7d Horror Edition/Plugin/plg.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 13043521ed6876edf2736fc46a7c49e6b639cfa7a866ca11de26f119796cd521
- MD5 c179e212316f26ce9325a8d80d936666
- SHA1 14d08b3cda60341d1e9187fc14bd64ebefe4a5b6
- SHA512 1b5eb687a9932c82ab2e655dbc5df8ba667a023e7568dbbd13c503a54661763193bde11937f87e2e09b88d770c8357eda07589d526e6103db058038e3ce3b750
- SSDEEP 768:rVRKgRFKn3N5U2jNGUyXWI9Yi1s0sbtAEsz8CjBMiPs2T:pR3R895Npyhn1sBbtPsz8C9P
- TLSH T10853D80A77878625C55D177054EF512007F787872B33EA5F2CCA0B8D4E923DA4FA9B8A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
71726
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
62KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
177B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT 0.7d Horror Edition/Plugin/pw.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ca6367d1ab873a55ced13d7024c530bbe4a6a703813225233e59041c7ce14eaa
- MD5 ac43720c43dcf90b2d57d746464ad574
- SHA1 eae39df1c717ca74f6f04d5ca8478ea55145535a
- SHA512 9082b3cd8b36031256923c8f2bed628e9331129bbf09d111d9d02268a49e493248e5638ddee5b02da66e9159a608f8f26499ca0f736d6a369a30f71950c60d40
- SSDEEP 6144:QxY714e31bXJVFJmShoCKFdZ3aDGjXsCUjguhyUOMO:7ZxJ/JmSG9T8CEgdM
- TLSH T19454D007728BAE61D47C467123FB72D183B5AF461633D51E2EC822499B3B2D3BA41BC5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
284686
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
270KB
Virtual Size
270KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
177B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT 0.7d Horror Edition/Plugin/sc2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 010b1ec566be774a2d12146f9826aa31fd7eb6ffe7b45ce5e572b2d8c7f815c3
- MD5 2d65bc3bff4a5d31b59f5bdf6e6311d7
- SHA1 43962fbeb93fc267fb1c7036a12b8c5d6f40c28a
- SHA512 b210d447cc9b4b89402a2a1d3d5e9cfe13ae897c47094be4110ed3aac109152c8a45ec138f73b703e7d3799934234cba4ca3f2439b3dd193a4cec671b9edaa6a
- SSDEEP 768:mtAX1G0UYRxIDbYDGN5/eoK79QlRfe2AfgFTMBku2T:mtAFZUYA/uW2x9CJe2BFQB
- TLSH T14423C602738B5B12C86C097240EB252413F19BCF1733EA4E7E8D669D5E933939F68B49
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
52238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
43KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
177B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT 0.7d Horror Edition/Stub/Admin.manifest
- SHA256 8ea63e8ae4a6ca4769da44b9d934dca248c2ffc0169ae251bd0f6eadca457f24
- MD5 ae08a3b3c72a07aa6b5babea340edc36
- SHA1 cd758742b1872eddf9ffe0bc715097c467ad7f64
- SHA512 0cbd2abf49b1155ce2c0f4645e20e1c40c8dd2d78f43276e01b14d5bdf3ba0ea52bde985c215868fdfe3ec61e6e4f83555394ce5ef3ee82a928bd26e413a0fcc
- TLSH T14EF09EC1D1C4DA6AD73051A13A66E010A2A9435B149D45AC70DC6ABB6F0AAC5C5C30F1
- MD5 SHA1 SHA512 TLSH
njRAT 0.7d Horror Edition/Stub/Stub.il
- SHA256 ad630e3c023a2d10c61f3d1e6d14e60b4e691bf900f2c3b42ac1aefd16d2c12c
- MD5 ddb962ecf023ba1a781a3241f6557866
- SHA1 f63349964f326569aebf2546be02b044386ae103
- SHA512 46f1ce3c8ef81536dc95305d9b4c617227e810028999718019629a657335e2fd60866c25188e5b419b49a89c6a0bfab59116d21a4ba8906576373206bde850cf
- SSDEEP 12288:C2q9K/m5eKZlRaoTTTBiBhFd5OghpziZDYP2Hz/oHRe+uJhH31C/AEuAw5wuE/uP:QZ
- TLSH T10EC4FF2D8228958AD5B2711DBE72CB46F76F42274F716C967CAFC254FF31288427423A
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT 0.7d Horror Edition/Stub/Stub.manifest
- SHA256 835a00d6e7c43db49ae7b3fa12559f23c2920b7530f4d3f960fd285b42b1efb5
- MD5 4d18ac38a92d15a64e2b80447b025b7e
- SHA1 5c34374c2dd5afa92e0489f1d6f86dde616aca6c
- SHA512 72be79acd72366b495e0f625a50c9bdf01047bcf5f9ee1e3bdba10dab7bd721b0126f429a91d8c80c2434e8bc751defdf4c05bdc09d26a871df1bb2e22e923bf
- TLSH T16EF0DCC1D188CA6AD73042A13A66E410A2AD435B19DD49EC74DC2ABB6F0BAC680C30F1
- MD5 SHA1 SHA512 TLSH
njRAT 0.7d Horror Edition/WinMM.Net.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 59e2ac1b79840274bdfcef412a10058654e42f4285d732d1487e65e60ffbfb46
- MD5 d4b80052c7b4093e10ce1f40ce74f707
- SHA1 2494a38f1c0d3a0aa9b31cf0650337cacc655697
- SHA512 3813b81f741ae3adb07ae370e817597ed2803680841ccc7549babb727910c7bff4f8450670d0ca19a0d09e06f133a1aaefecf5b5620e1b0bdb6bcd409982c450
- SSDEEP 768:LyasDzF2TDSemqD9tGI+ffwj2Au0LVpqmf7KxcOOrYCPTxqPb85:LyaXKemqD9tGI+ffwj2Au0LVpq4KWrlv
- TLSH T1EB13B60479A85CB9CB2F013D6CD61211FAB18D647227B62B1CBE70F318977DE9A41AF1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
50302
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
41KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT 0.7d Horror Edition/extracted/Res
- SHA256 52cad2ada36a7a4b8d5e653cfe1854d32210ef198561e4cf53ea1c4e5ebbb84f
- MD5 2f92eed4e2061af0961f379e9ded70d6
- SHA1 8b58dcd428759d3633a14bcfc62a8cb6deb66de5
- SHA512 909561ad25f5a4af7360004a6b259bdb70dfad4ced7fe0f39a72ed61f421bc943dce9c7215634ed12284811f36d9a5bae8d1f439412a94bbbd4c24cb4f4962ac
- SSDEEP 24576:XS9wlTzi2gQO1PMV2DCHAJ2glv9fJVOYfJSzaSArbz2jQ:C9ijgQO1PMDozYAPz2U
- TLSH T16F258D23F291443BD6732B369C6792F4592ABE103E2C994A37E83E0C5F763817963197
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
1
Entry point
757932
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
736KB
Virtual Size
736KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
9KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
8B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
201KB
Virtual Size
201KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
njRAT 0.7d Horror Edition/extracted/Rpx
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 151e09c4e5d45d3d7247bedf08096ce1f8adaae59476ba1637839ead8099e53b
- MD5 4571a19fd31b61c8947490fac3b54ef2
- SHA1 a4a3026b943695189ae74344e550edd21dbdf103
- SHA512 5ad2d098f5b9097f5bab92a91b6d904bf374ae0e7c762f353b1dfc5190c8faca9072dcd330b13eb2290c70a7d27987e11c26cef7a4d05c8638817881bcad6fbf
- SSDEEP 3072:7xexpcRJvrGI2e6kQFXdhHaaKGxufkByDo1RZpwobf1Xv6IPcm9ddVMQKB:7xezsN2eY/vKoufkBy0RZpwobdT9ddVM
- TLSH T155E312107AC872B2F8B30B73B84691E482C27E417D92D5DE1289B9CB9FF1902A555FE1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
153406
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
142KB
Virtual Size
141KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT 0.7d Horror Edition/extracted/Rug_Packing_Reflection
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fc5c7454261c7dd016302be92362e4cf60a3c9c6c4633c65855b3258d534af73
- MD5 63b02fbfa302ee016bc83be8f18efe77
- SHA1 61ecf0bab944dc173e2c06a0b059cc620d75fb0b
- SHA512 6a9aa2b2c74b34e43549aa31d3621c47003e370c4fffc1fe9844df347eed61c8e319a6a42e158d772b81fd19eb9d7b845e736062d7e14d404a9d74da0d5990d7
- SSDEEP 192:2V6ksZ2Bnx+XEXi5U4fkR3WZs2NDqQp3BrPNBNoGN:2XA2BnUwCfkYZs6DqAl7oK
- TLSH T16232D71597E8823EEE7B0BBBBC63B22102F5FB44D552D92B4C4C414FAC677508A22776
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16862
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Code\CSharp\RugProjects\Export\Tools\Rpx\Stable 4.0\Rug.Packing.Reflection\obj\Release\Rug.Packing.Reflection.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT 0.7d Horror Edition/extracted/dotNET_Reactor
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 79f190a51af8a463f13ddd5a76947cf7ba2adfb8e231b37c5e0968602217a62b
- MD5 a7d69d6ddbe2586d698ebdf7f49c1afa
- SHA1 7b87de25c982d0cc42a1dde89790cd34acbcfd2e
- SHA512 2d4fb34f83d9794c38ec39f12f78b8d7c5af331aea475eaecf589f95c9e1849196a8d5252a7f9beaa596bb34ddc0c94b76a6c9092dc0fb93ec6b0af9fb66226e
- SSDEEP 49152:VXl2PFBegFNFLua2gBxnnim//7rF31inFhyNkLObEECwc0mjZ5tzCo3Eh5pfO+pD:VW5nnim//7uvwCt5tuo32v
- TLSH T1C6567B2076A8C911E0AE9774C3F281FF0BF0FD0BD226971B69857F6639B17425C06A5B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
6205246
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
5.9MB
Virtual Size
5.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
njRAT 0.7d Horror Edition/extracted/mpress
- IMPHASH 51e7ef6b1d43d0d05d7109dee9789560
- SHA256 2852680c94a9d68cdab285012d9328a1ceca290db60c9e35155c2bb3e46a41b4
- MD5 8b632bfc3fe653a510cba277c2d699d1
- SHA1 d6a57aa17e5eb51297def9bac04e574c1e36d9c7
- SHA512 b9ea70ed984d3b4a42eceb9f34f222b722c4c1985b79b368d769fe0fd1f19f037ffebe2cf938aa98ed450337836a7469d911848448d99223995f7fb3a9304587
- SSDEEP 3072:S0+mlNniJkkKcfqBOb65VgB183gUGQ340HpL:SvmlNn4kkeOAVA1rUGh0Hp
- TLSH T125A3F1A1B140A61DF98F4E39CCC7B38994D2EC21953352466573FA8F84B27E43F12B49
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
225455
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
GetModuleHandleA
GetProcAddress
imagehlp
CheckSumMappedFile
Name
.MPRESS1
Size
88KB
Virtual Size
216KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.MPRESS2
Size
1024B
Virtual Size
862B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
njRAT 0.7d Horror Edition/icons/10.ico
- SHA256 b5c9954fe4f300e11226301e4fdefd35a180a9dfd38385ad8448ddfe07447eb0
- MD5 1cb45cb1fc481e43d11f518a12c007be
- SHA1 b01cce7784e27405a2f5223c51210cc4f9cf8b4e
- SHA512 f3c835422ae8a5b905d623902f5987257d03c9b76201394baf39d6f3441cdbd737215e0c90182b21abc39e41d8ec874ed63fd787dbe09f1fe27c07b5fe7751af
- SSDEEP 1536:ltNLBXfpUplphppgpppfpmppXptpHpopnQpd:jXfpUplphppgpppfpmppXptpHpopnY
- TLSH T19AA3FD3E276AC066C9E1403CDF4687FF162A0D69E1D2052F2664FEDEB8FD04C2679592
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT 0.7d Horror Edition/icons/11.ico
- SHA256 6418f9a87c22029f8bbd6690d30bf845e5852d3a2ff2cf7b72ed3e34def8b25a
- MD5 a999bd85d73b4b4581350ff5f6c28d84
- SHA1 0dc32cbe11badb57ea39f434f43ab035a432daad
- SHA512 882738cbd3437d9d965c2a6ef1db1ed8081742f9a042611cdc85d84b39beac4d90f7cd853b54e509b0c5411bbc032e3869601bb908eebf8bbb535a562cf5d6c7
- SSDEEP 1536:aiRT9UTJiCTZdpxi+gbj9TMTTTTTTTTkTTTTTTTlTTTTTTTTTSTTTTTTTTTTTTTh:jRT9UTISFirj9TMTTTTTTTTkTTTTTTTa
- TLSH T11283A3E1F78DFB5ADA5D0770C442D3F919362EE2FAA3014360987ECE75B10424BE62A5
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT 0.7d Horror Edition/icons/222.ico
- SHA256 f7c66d34840bad867c64809d1eba416832422d8230c7bfc55a1ec066e5fbd77a
- MD5 4f5c162d6c6a8102e72fad0822e0d1b2
- SHA1 de7d371c3afc460f531b7be75f1ac70f6757cb50
- SHA512 a84f1029bda3afc3c0e06df5394bbac782de58170e780630bff68c79bde13f673ba209aa71929143d1ac8ab30331366ba67899534f146670fa7647059b0ea48f
- SSDEEP 192:jdGUS4QX8Bl4MiaxaZA17g+6rNTOxf8o/LKpHc:e4QIiaxaZA1ySR8o/Lac
- TLSH T1EC72B691F305CCCBDCA853F2EC4BDA942594EDAFC8A4461F54B7BB1AA9B31531053E0A
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT 0.7d Horror Edition/icons/33.ico
- SHA256 04ba6bf89fd52c3d3c93ef77045b0ca6a6087c964841c8fbbd989e6370d655fa
- MD5 2a28ecebe11028b280549ca7bea462dc
- SHA1 56559e537b8a38f273a7f895ca24f095488c3101
- SHA512 2088284b8db352b5d6e7a670e77a7938a6a33ff09a977702078a0f2458d81d9161d0e1865d8c5e4209062a33372df1b3ae2cf23c3ddfa61729f4370552762e5c
- SSDEEP 48:zPoiMRScOmO2Ph9jGu1oG42kUcBouqJt3B7EtPDRY19IRXWDhyPdcZMB:UEZqjG6o3mt3BSDRY1uGDhy1cZw
- TLSH T1B8914244F5031DD8C65C19334D00D3F3C89A7DB19D6E92E4BDE13ECB797ABA14A4890A
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT 0.7d Horror Edition/icons/5.ico
- SHA256 b8eedd84108576669b3ebe1af006a39dbe7b932a5cfdcb4eed8e1028464da24d
- MD5 cdee018e88b7a515827c9b7c0afe9c3f
- SHA1 ac81088c72f8a0b9ef14b3f5f86a61b70a28cc9d
- SHA512 bd2ec838514cd61f2cda60c94f835543184ffe29985cafcc6887d57061613986c7e2901d20fdda5ce608b8baf25708bbe3abe0e52142565397893e382255ad4e
- SSDEEP 768:Sc5BbMZLCwueihZX+1colcmS4QElRd4m+rlIzlm+K4Is448GEQsmo4d5dU+dz+tu:bIRCwtihZX+1colcmS4QElRd4m+rlIzx
- TLSH T189C23AFEE598B4E4FF4463B0B326C916311BBEA95C7F771B4E563115ACA39CC981004A
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT 0.7d Horror Edition/icons/60.ico
- SHA256 6e7bc8640eb3c9abe2812315ce0856b25c92867db899e402034190ba276d7c40
- MD5 1e2f8337310abec7e1697b11fa5b5c45
- SHA1 27b42e545cc953aef27891d15a795d0240fd01b1
- SHA512 d0bfbf88c30308f1f5aa14d3560ca39fca1b37b6671052963dd5044a709c8cadffdaedfb67657a1f5bb790ab3d4ade9033a905e1b5b4447d4a5f37a96b3516ee
- SSDEEP 192:01vJtue4521LmeQbv0/aYAsnIm6310cCdZeXypc3:CvJ0eGISpW3IPCdZI
- TLSH T1FAA2EAA53BF66C98C82A5E790142EB360B42CE885964C7072BF1EF4FBA8DF457C054E5
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT 0.7d Horror Edition/icons/Boo.ico
- SHA256 5c068bc7bb5be167fbd36ae123515b43de8ec82f5d6d4be32712cb88037cbe89
- MD5 4c4f2810791a51dadec0f7d88dd8ae2a
- SHA1 0347349dd7537229c9c8ae4bd483b5673f1018b1
- SHA512 55212e9efc10dd2ffc269bd7ba333eda22e4595bd09a35fb2a4793177d85deaa45ea43cabecc18736e1696e349b1df0ff11919ed07131454ff3b4f5344e34d24
- SSDEEP 1536:R/kvFF6MpuoibbMA6IIASrwXPFBcaFQ74kTCXqeR3M:K76MIoU6Iow1FQMGGqU3M
- TLSH T16153E1AAF9027DD0E9318D38407E0E2B676DFD566C6009432B5C76271EA263788F3D0B
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT 0.7d Horror Edition/icons/Crazy.ico
- SHA256 38f672b76268cba9831d39542d75c1011d1d1cae444c182033151473bc28b9c9
- MD5 ec483d61999fa717bc521822f0bac949
- SHA1 7a6f19dc246148c3ec58131a2ee02f2587121b3f
- SHA512 acd9668689a8defa15c24b9e1c579ca7a4a47e21a65efb3fc66365f2c2c3566bf4a8956746ead15525f0ff7aa8e7cc9d451d7f4074cb5a4ff7be5c2e669e2a8d
- TLSH T181412C11CE27A865D9A4D0F94DCB58BC1C74E983C0596E8B03C07EFA3D17C97EE1A11A
- MD5 SHA1 SHA512 TLSH
njRAT 0.7d Horror Edition/icons/Luma - Blue.ico
- SHA256 0b5b1fa5030a11eaafa818b8d4ea41ab7d69b97e9ec46a7494b8e5495a182807
- MD5 47c3ca39c929688e84558438e1142e10
- SHA1 f03acc85eb11ab4c8f4b972d849cefcebbba916f
- SHA512 6ed0f1e3ecdc93e3452f751a244a1d4e3b3cd99e586097c7e4887a373d702d51e3bdb5e63e86e9d7a15e261751f1df487f2c5bca92ab4886ba6487994771ed4b
- SSDEEP 1536:M5MQkuCUvvL6ED0plpMdQ1FIYz8Br9G71j+1o1cJLQoMLR:EMheL6ED8pFIY4BrI5roHMF
- TLSH T1B0730213A3EDEE9BD1B469348521EC865FBADCFEF456E203A47CB583AD5E099C006434
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT 0.7d Horror Edition/icons/Luma - Yellow.ico
- SHA256 90c3a8ec41f20c19011bfff58c4b437394121828a093bc3c9f0d2d4cdb23d824
- MD5 372573fb768c0ac6a5a467becd74271d
- SHA1 efda5a732eb9f388333c212539a00661f0853571
- SHA512 82bc786de5ea8d35f6ec1a67ea2726c180a860ba29f4380cb4a5633048fb8ff5ded96e7f3ba5661f808fc2c9ca9968b4ce9e6780b15a4b7b3ef26fa06dec3d2b
- SSDEEP 1536:DcWA/JOlCsHkm5aSTlXrmik1gEyn5YC44:YWUJ8Txq+5d44
- TLSH T1BB63F1E47ACAE884F87008B4C61262DF7006ED55912C1C620D38FDDBBF747A2997BD82
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT 0.7d Horror Edition/icons/Mushroom - Boo.ico
- SHA256 470f4597bd7d7ee0f2ad0ffd1b83aab98b02128a618e35f11cd980388b46dc82
- MD5 f8d50877d4abca64a2efa73901ed041d
- SHA1 47f43ea88119c356b134970295600f442f6dd6a3
- SHA512 82386b9d051f521057d0f3db8185a34034f0b066994074988b3c955715cbba8f375545b3334499ffc19653592344a3d0393cebe96e86639fb0d9baecbbb0cf9d
- SSDEEP 1536:2Arvo04RT9j5+RZIQLG0BsVb+bg4NoeI6zm:24zcuZI47BiGnzm
- TLSH T140538D816D425245E01E05B05C7E5EAC83169FEA7BB8B2DF991D3EC35BFB2D28436203
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT 0.7d Horror Edition/icons/SETUP01.ICO
- SHA256 3f5e1605d50459c0b03313d1e5a0ee867454c328794f2244868c2a6c32cab974
- MD5 4e13051b87f131521711f2a19670f3ca
- SHA1 2b73f4edd8e67e5592d0186432fe08aa138f216c
- SHA512 0ffbf6c9dc8690851ad4b5140dabee6b649fdf40d945e1acce574e9d4721533e77816b366aa5418ff8b4b381eadfbf039b5aaf816f19c7b7689acfed7500716c
- TLSH T14601815E250FF4AFCD9EC63068236DAD79054C0599305A329FB5364B3B7B2162B091BC
- MD5 SHA1 SHA512 TLSH
njRAT 0.7d Horror Edition/icons/SETUP04.ICO
- SHA256 3be6f9858550929a81498be36fd4c30e7b4d66207512d030a7eb609557415498
- MD5 390c6059c6f37d95dd92f5f4957fb3b0
- SHA1 64d43b39badde5c3503ad7a25e368457d47a34d3
- SHA512 ed08e39bba5e30a542b8716b5cb23c2186c98d1b09fecbe9ba8db8aef9d8c68babb3568208411fa431b6d584e9bed2b4a7fac9dfcaf06fdb4f7687d3796d19ba
- TLSH T1F60162468933A9D6CC8C993200B795663CF01C25A580EEB156B0B54E6A313446B0F2ED
- MD5 SHA1 SHA512 TLSH
njRAT 0.7d Horror Edition/icons/SETUP06.ICO
- SHA256 217766ae48fdfaab3b6c6a59003bd95d92effbe0f8d1b58c2bbe2a2fb85d8610
- MD5 a688105d2e3df9769a0b8830a7510d45
- SHA1 17f98174f7a47998b210d9decf7c90c2633508d8
- SHA512 6f2bea1172568ca2a55a66f50d0d6df31f4425739ccdd137bbb56f7495ce879c1d9eec6cdd756f92c8280e5cb2cc87e943d7f1bfe0c338496d01eb98a90603e9
- TLSH T1D6014457711472F9D1DC1E314E338A711D9009B98502A13772F5FE1EACB039935AD94A
- MD5 SHA1 SHA512 TLSH
njRAT 0.7d Horror Edition/icons/SETUP07.ICO
- SHA256 1a92b60da099f44ae3ce5aae5d5be3a714b245ad143e66279a8d0c8ef191b23c
- MD5 92396f10abe4461edcafac05e7d9698f
- SHA1 8886597b1c49803571edf8c779e850921464c35d
- SHA512 5829bef01a3ab4e5c7cfe3a66826bf6f765c05886f488f55bc445219f318a9663d24a1599404c85dce8665df44ad9dcad686729591ad7a8c3ffd78a46b2121e6
- TLSH T117018C6B763867D1C92C0432C933DBB15D649CB6900040272AF6EF8F7C343A938CDA98
- MD5 SHA1 SHA512 TLSH
njRAT 0.7d Horror Edition/icons/SETUP08.ICO
- SHA256 a42d890a1441a9fca17b70f790ab761a4a0a230d84441cf5649cbf1ed1c9911f
- MD5 22781c9a7fbda5ec38501757b7f8b86e
- SHA1 7af597b41cecd874e520da71e99929c1b1a3a0b5
- SHA512 92d289ce0df5e3f0b311cc871e8c0197e6bf4119f8f9e9ce97337b5668e1928abd4553ad4559635eb1572bc39e7d4958ef62fccd765e02773ef9e42021dc26d3
- TLSH T199013C86713B56C5E96C0531C913A7B54D6A1839BC10802662E1EE9F3C30B48FC8196C
- MD5 SHA1 SHA512 TLSH
njRAT 0.7d Horror Edition/icons/SETUP09.ICO
- SHA256 a650a609cce6d1a7ba46cc28d63c30615a398c8e8360c9ed7879abadef366d5d
- MD5 0a3959aac836b844f386eca454b113c2
- SHA1 b6563dccfb6f64cf6a66f4804388895c34d8bdd5
- SHA512 0cac7ac8d90ae5a4eff1fa6bcaf049167c57307404cd97148f7fe71c243f2971a17893622e9c3205ef491d8c718d1e8dc5357511f590e5f91c5630d46123a877
- TLSH T178016D5D361665AAD44C4A738D8363F608B198513F2122F3F5B23E0F6E7466514422BC
- MD5 SHA1 SHA512 TLSH
njRAT 0.7d Horror Edition/icons/delphi.ico
- SHA256 4479905ca3c44ad6b0339ee27ab2e513483782e930ac8854fd577a7661fe0b58
- MD5 8276169897cb90cf7b1350be6d54ebc0
- SHA1 c6334a0c9322decbf3bb58c9552d3102a0abf3be
- SHA512 b942e044ad2a3d812429e81129f5faf6bb630ffac7e2ab6eb8de29fda4794fe83d73efcee58838c64136591f629888e05cf7583f7e66276a057b20c33fb7505f
- TLSH T17101280B724478DCC08C96700D0716F43A3AAE69260DAF716DB4547F6DE07829EA359A
- MD5 SHA1 SHA512 TLSH
njRAT 0.7d Horror Edition/icons/hydra.ico
- SHA256 a5ad07b74a7e333b7a46103d0594a101c71dea9e642aa9e378d3d9bc2e511f45
- MD5 64597460ac24c93849e480b58228a930
- SHA1 9b5e76fc5b5d2eee1e0ae4d8addb1e82043a0b9d
- SHA512 f9677b1d038e2006e014985532a63abbeeeb45ab20eaa279f044f4196badead5667269f4c1d0054cf6514d23f96d5215d270da4f8e863944e9b2ec2c71678f9c
- SSDEEP 768:7OElQgYOlWWPpvqr5C2sJU8o70nJDN3/HXcQxr:7OWFTZQIDlJD5V
- TLSH T130038DC3939FAD0EC224537542FE2F8B7E409A18543550CC90C6BBA57E66147E1ACF79
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT 0.7d Horror Edition/icons/installshield.ico
- SHA256 e8be461515459e4d641e2b2eea6291e067bfd103d0fbcc2cdce20a184dc766e5
- MD5 599e51a4abfbc61dc8ad4d1723564eca
- SHA1 47708bea6f6e648f8c400cdd996b52209e8083a3
- SHA512 84e52962a82ca1c1d0db0c44727534257f48e56d2f099922e9d7fbe6df0aa585227281c3c9005c867f99469f495cff198f8eb7a90adb253cd6e2e65638bfa927
- TLSH T11F41A9BAFB5F9697F201AA3D88ECDC040945B1E2D9D1DE3D26028E82FD2665F3049911
- MD5 SHA1 SHA512 TLSH
njRAT 0.7d Horror Edition/icons/jpeg.ico
- SHA256 ecb5acfe689de564248be488a29c798e5186e801c4be455bc2712ff4e8cdfe3f
- MD5 9a7ae63dc67b2f1ee401f9f24feffb90
- SHA1 748c8c4d383692f87a139d1bec6b1edeeee3899c
- SHA512 0e1f9b7ae291979a61826e8f3a9880c91be48ac4625b5586b4c8d21e294afa5e60ab371343ac0ada4ab10fba6a35bdbb3d1e064516a06b940822ddf58c67266c
- SSDEEP 3072:INg9SF74bA390z+4s7xepuPZU6TvfnXrlP:Ia9vbA392+4sdeETnnRP
- TLSH T1F7C3F1517504CCF6D46EC6777C13E73802262DAEB8159F2E3888FB9A2032682BD67D1D
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT 0.7d Horror Edition/icons/jpg.ico
- SHA256 a05a08e4b8adbe08fde7af6591e845e733ad959802edc67219c4de2a265e493c
- MD5 38dd6c975e70d6661caf1e664050ff90
- SHA1 09231a58f67249662f235f104b2aa7bf88a3e9c8
- SHA512 d316d416991ea37b69b896d0d700a035d768be9cd7f589b57ed6ef5abd75434b14a589685066f5214a842d482e8656abc02831a294c28b6e9bb2fb90e81485cc
- SSDEEP 1536:D5M706rv/2bMlaUlsvA1rRCpHdLMVqAaTItiL/1GWJZ6aNah350UP9oElUy:Nm06rv/2glOv/fLAFabL/1HZ9iYElh
- TLSH T178A3C043F64A95E0E01E8E76A87B1C7106213E2FB98C1F1E7068FA2D45F23527563E4D
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT 0.7d Horror Edition/icons/mp3.ico
- SHA256 f3c09cc904e983fbd222caa9fa9d0d432f7e2c0b52902d60fd5047e264a30cb2
- MD5 77f4107e399ce8c1ca3428bce27368dc
- SHA1 201fe5f7168491faad8dc83044a7fac53ea2e63b
- SHA512 528ea2a9e64f91bd7d14c946b7a5acb0b892fdc49d3ba99024498023697542be07b85aa3d8145b7683cd26fff9ff0c5b3fd3fe9de48242f4fe15fa81ca608af6
- SSDEEP 768:d/rmtz4YcHD0pd19PAwNGAUcGrv2l31Sk56mZkIuS3NXj++3V12r4SCMMNDKz:d/rzAfow/Grv6MmeWNXrV12czKz
- TLSH T10F531890F209DC9DE816D87F842BD6310446AA69D8B9461FB0977B1B2DE334321AFD4F
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT 0.7d Horror Edition/icons/ms.ico
- SHA256 56d796bb2a527c3e414314de4074b0d58f1bc40a1e6a8cf7e0d89791c844ff0f
- MD5 70834fa0882922829416cc3080d51a13
- SHA1 6307f656c13912b4cd786c67ea228a61901653f9
- SHA512 b49bd651cae66726ec7832fe048483036f89cc8c4f5351237f2c0914a389822f9fc4148624e653fbb9a30c50b0cf96c10b3cd9b86e0082bb2ec360a240378ce1
- SSDEEP 384:kIJbXg7LBHkQeqJ1DypGY22f5aS6gMoh/cIZOBKJH1d0:lBALpeOlPYT2Im61O
- TLSH T16EB22A122644E5FFCD710632EC639FE12EE1AC15CBB286E7A721BA1FC871292542B535
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT 0.7d Horror Edition/icons/pdf.ico
- SHA256 d1ca4a262546037505b9e7e3056eaf23673b3350502611a0aba5b60d86a634c6
- MD5 721c10b15ec8c56fb1c0bda7ed370e92
- SHA1 4c76849c6debe936602ba003e96e94c6645030b7
- SHA512 dbd6f3e07b9c8a336e4f48e006c567e1bd7269efde1fcbb1e187d8b25128588cae6bc4c6f7196d45623eddb7c08b4fec33ad44696430e63554e4d050a41ff98d
- SSDEEP 1536:LFMMMMMMMMMMMMMMMMMMpo2jykAmWMMMMMMMMMMMMMMMMMM5gayqi91tdSRgi6k8:LFMMMMMMMMMMMMMMMMMMqk0MMMMMMMM4
- TLSH T10283AFD0F249BCD6E8026870CD37E7201055AAADC45BC609B9EA3B1A16E3743716FDED
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT 0.7d Horror Edition/icons/ppt.ico
- SHA256 9ff9b3447ff8a88db57c5902a46f558991f4c34f3a893cbafb294a4f25a40b76
- MD5 a45be89532ad43dc477d55b06c3196f5
- SHA1 ce45e2c51d27225fa4ef771ba2a8b29e2cc2e131
- SHA512 1afabbc44d22dd29291be04fc2fbe8da9d52a3c5b8bfdff498ed1ba9268fbb998f937e85e47af309e6ffdbd8b1f289524bacf8eb817b9780d53bfbaeda5ba127
- SSDEEP 1536:UDSIBQkm2cWIsnWvRUoGHXotv8CjBBDTwg:U02ndSUotnjLwg
- TLSH T199737DC2F901D69FEC5A0975A13BDFA433023CADCA61091B70C5B66F0EF766A145E853
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT 0.7d Horror Edition/icons/pptx.ico
- SHA256 339e120042c22d6a12e8e36ff14f0741d35453996e013a0823be44daccca4d9a
- MD5 d56a246808f379da636dedbcc0dc06a6
- SHA1 cb3e54447dcd711c81f1a56b4f0097a0bf7e2ebf
- SHA512 4662817d67b3af3f66aaf08bef7e8b67152b6b99fb58c8566ebbe08dc83e9f09920af9a7b2f85479ebeee9bf26f1d4339b6010761fbff3f8f56f4229f0eb0d41
- SSDEEP 768:SFAiKpKcnFv+ZqGBQuxrKjzMS2qP7telHMuWEnKzqK3AMXF7VRL:SWDKccyQus8P7telFKzqK3TXV
- TLSH T1C2536CE3B3847249D66504305617DAB012637FBE9B285E37F194BA1F2EBB1805223B77
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT 0.7d Horror Edition/icons/realtek.ico
- SHA256 c24d5290e5ea28a5bed6b6bbcc12cff1f16b31effcc003ff171820b1a604e636
- MD5 480b7d4be5af6ba8522b2120ae913537
- SHA1 b4fa13bfe055a01d48b79266b1dcd44e1b83a923
- SHA512 d27e9a316b2da85f9d6c18a2e8bf1cf67290bd12761bc82907083e262cb0a0894eb60568cb1b5d1c8d4aea58f7b0861c12e7ebd56f0cd33a788d7e880122ec30
- SSDEEP 6144:BuBELyW7HDAqZGd1Jf1htIfFmfBzmL47J16+9R4sSoig2LvgAZQa+qUsoM:DEM
- TLSH T1555493615A50E48BF35499B5C0F4FBBE49B13EBC5D668112B8FFB6ADB3393140C29212
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT 0.7d Horror Edition/icons/setop.ico
- SHA256 32c575dfbd7bbb8e3bd55a19c5540efcc3ea59b7c7d9a5944aad856917d16dba
- MD5 2315ad99d860ab9917f3e61abc7112b6
- SHA1 7ac2814b86d3a394e2b5b155dacaeecdd6ae2961
- SHA512 98b64bc1003f0e15c31910b8ee43171b8f7456c94d55f9312f194b068550304875c28c76e23e22434d7f0c7bba772a2108211af35baea22a85c6efdb2b7b2bfe
- SSDEEP 1536:6uKIUklXrRt8g6gOPdano7PivXbiFQPn1eZsmUb+BGObbEy:uAXrRt8x6o7PivriFAACZb+BGObbEy
- TLSH T1FDA3F6C1B4689480CEFCB1F2B897E85220E92DAD9DC34A4DB5F9723A6472957CD0790F
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT 0.7d Horror Edition/icons/setup.ico
- SHA256 1fe1b2d465347bb462a1df2eae0359a1461dd84e709581b5f26f6fb8654c2152
- MD5 76685dfa5860561a421b7acc5f5c37fb
- SHA1 5fa8562c445fe49cc9359636135201e6a536ec7b
- SHA512 214f54e0049d7c46ea4f2ab5117e92468e39cc9e14351eb1d269ba0c7de1f4b819a67ef7624aee78d1c1a8a592a421bea14f7b401206adc41166ade4c31f55cf
- SSDEEP 48:c/Rx4H4ONkUvOvg9wMSDQPxQV3Po8w+RV4yMXU3X9q7ONkUvOvg9wMSDQPxQV3P8:7YONfeZEWVArvU3mONfeZEWV4+xF9pU
- TLSH T154A1AE26630188C4E540CC324DCBDEAC0524FC17586D395537D0AEAFAE37DDED5634AA
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT 0.7d Horror Edition/icons/themida.ico
- SHA256 901d058a955d945abfcfd07ec1a7634ffd79d8c484b3ca9e2f942cacbc3081c3
- MD5 58404306348d0769ed86f0249aadfae9
- SHA1 ae59e6881fd1e09ae1ac72e6fa9131d81a0a1f3b
- SHA512 e2ddae9496fbc1ecee46fdbed9b5784a8b5eced6aa8a91809865df32fae563883734f0c0f5ead74c2a663ecd356b9794aa6e4098c2461d201a0f9f59d2f3701f
- SSDEEP 384:yn5/DVeZMemW/w0P2ClioiXiouodZU/B9X56Oib6yKlchNkGU7LuhNpq2:yn5/DV0TmqH2IiLUZVBa6yK2HkGMQ7r
- TLSH T1BD92CFD2C58DC115DC987AB98218F06A8AB43BE64270F3D5178EFE04A9D29BFC464286
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT 0.7d Horror Edition/icons/vbs.ico
- SHA256 59ee0f59485bfe2310c653362687a1d5500b3bae14d16113858e36a520f52374
- MD5 897b4de105686f8a1c3c618654d8ff84
- SHA1 c637a5801566fb37d99fd875357f18db88e108a0
- SHA512 6dd3d832c25e574114463535887411107ca3fd61df13e3af71f01177b4e80158fd6fededa0ff699dff0ebc7db58cf025741d11e5bb978cebeeb2b755df596cdf
- TLSH T1EA11B291BF1EA477D87C0A38AC17CAA688312C6658F3DDF77FA0B74EA8305D01B41508
- MD5 SHA1 SHA512 TLSH
njRAT 0.7d Horror Edition/icons/windows.ico
- SHA256 0a3f6bd796c12c8a118f7ec83f53371259ce86e0256ed00687e33d1e0a2fed80
- MD5 53094f6a2875bbddb2df21faf5c57a77
- SHA1 5132bdcc502318cef2a4163a32f2b32009f833da
- SHA512 7f90981d9ecd59104afd39edfaf164f10b39874d36c2ed6724be070747803542b6ce13d84fbc662df7d47b2ef1fd39d898bc2c562769d19d3dc7b5e4e6bc7743
- SSDEEP 48:HoStQOWAvS///////Jy///////zhOQLVIff6P3:IStdWAbtIfC/
- TLSH T13A04E6CA371FB488E5C416B288C5D4BEE4973D76B8C1014AF6F7B64F26B5BA24C58C42
- MD5 SHA1 SHA512 SSDEEP TLSH
njRAT 0.7d Horror Edition/icons/xls.ico
- SHA256 d04a38caafa0962f8b6b8affb15c4db3a48e20c355755e8cd5f588dc00824a2a
- MD5 0c6b533abee847d53288e3502531093a
- SHA1 b9b71016ed4289abacc3700a29df710df1ffc152
- SHA512 d4fc20cc98eb49a6f8d1a834ef9ec2ee04544d8c02e5776dc9262579fc4119c6482b5a077d9b6dd3c0dad5decb21bb597e0d8330936aedf4743be8212912f0b2
- SSDEEP 1536:Iu6/DTE31k1+EepYqrA5O4/Ge3Ffs5UYKb0QxxRm:Iu6LTIa1mxrm/J3hV4B
- TLSH T10543CFC2F251E165FC6727742533CF400902FF59B8DA14453EAE7B6B0AF718294A754B
- MD5 SHA1 SHA512 SSDEEP TLSH