Behavioral task
behavioral1
Sample
seroxen.exe
Resource
win7-20230712-en
General
-
Target
seroxen.exe
-
Size
1.2MB
-
MD5
23bcbc01902b755f08d37d887afd8e5f
-
SHA1
7c87d513a85ca3217e9ef6b46d03da3f1b470da2
-
SHA256
4b19df159174682f7dd101476f080b7d64e1fabdc1a1a6c301d3d6741d962ccb
-
SHA512
f740df1e347afa2e8e220f76ce54c475fa75fd61b9a43f50e54199f3609453568324466a166392512f6679e773ae936d61bfeb2088d7a8dce842d51d5ee606a2
-
SSDEEP
12288:sJqRSsR+CMzGbpNhBBBYiz1l/bdfpBBBBBBBBBBBBK5:XxBBBYizXzdfpBBBBBBBBBBBBK5
Malware Config
Signatures
-
Quasar family
-
Quasar payload 1 IoCs
resource yara_rule sample family_quasar -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource seroxen.exe
Files
-
seroxen.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ