SeroXen.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 7cb37cd110a388998ce95819da915446331f614a5da8d5cfeed953812ada23f1
-
Quasar payload
PE Signature issue
Digest
92:91:9c:08:de:7b:01:3c:33:6c:21:e5:08:45:c9:fd:94:9b:f3:6e
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN={C97DFA28-2A19-440B-8EB4-4EA8ABAEC4A4}
Chains
Apr 26, 2024
Subject
CN={C97DFA28-2A19-440B-8EB4-4EA8ABAEC4A4}
Serial Number
25:cf:5c:85:5f:f8:f2:b3:42:ec:f2:23:23:8c:e8:50
Issuer
CN={C97DFA28-2A19-440B-8EB4-4EA8ABAEC4A4}
Timespan
Jul 29, 2022 - Jul 29, 2023
Minor OS version
0
Major OS version
4
Entry point
40395734
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
.text
Size
38.5MB
Virtual Size
38.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
34KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ