Behavioral task
behavioral1
Sample
7xG.exe
Resource
win10v2004-20250314-en
General
-
Target
7xGv1.rar
-
Size
16KB
-
MD5
b13ec2e4d3252121723ce40a3961b744
-
SHA1
73933ad5704532b05374a99c433c1410bf2f4072
-
SHA256
9347f295b4b16f9a6dd0513b43a58549a307547b2001781d5f1a27b4e4f34443
-
SHA512
4cf67d3123bbaf698807fecd0ef22f52eb1b1b425ed9114320cb52814278a8365426eee76fda3b873fbbd8bc6bd1b8076d454f64664d0b2ea422fa98079d8291
-
SSDEEP
384:ijIVgGZwjruZ4Gdc3A2YOQ5Qkb2UYo7u4UZiR:i3o2KwLTAR2l4jR
Malware Config
Extracted
njrat
im523
HackedSorry
127.0.0.1:5552
72b9677783005d3ff7767152e2734d7e
-
reg_key
72b9677783005d3ff7767152e2734d7e
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/7xG.exe
Files
-
7xGv1.rar.rar
Password: 7xG
-
7xG.exe.exe windows:4 windows x86 arch:x86
Password: 7xG
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ