ByteCode_MSIL_Backdoor_NjRAT [backdoor]

uint16(0) == 0x5A4D and
        (
            (
                (
                    all of ($persistence_mechanism_v1_p*)
                ) and
                (
                    all of ($connect_v1_p*)
                ) and
                (
                    $send_v1
                ) and
                (
                    all of ($receive_v1_p*)
                )
            ) or
            (
                (
                    $connect_v2
                ) and
                (
                    $receive_v2
                ) and
                (
                    all of ($get_system_information_v2_p*)
                ) and
                (
                    $send_v2
                )
            )
        )