Static task
static1
Behavioral task
behavioral1
Sample
SeroXen.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
SeroXen.exe
Resource
win10v2004-20240508-en
General
-
Target
SeroXen.exe
-
Size
378KB
-
MD5
c14c7d9bdf750ed2922e93934281726f
-
SHA1
ceed91150c87b5b836219e4ec94f13221a5e1f5c
-
SHA256
624c25a5293b465fd3a37cc7be7405bd532311e28e96b84c0353cd6b9aa2179b
-
SHA512
0934819074409b3ee995685d94bbcfd80a4e7c26e2bef0b4e81f3984d94cae61e8912f689fd3c6ebde17fd8df4f6e1cc79d8d99dfecde3b472a37b357da198d0
-
SSDEEP
3072:iVHdV5EtjJud7hp7P9C+q5cnS2uFjuWWyXP8q0gr5I9bmzF1pQA+JbTayvWJezpP:iV9V2Fud7jFCJ4lutXWyXP2N0+5
Malware Config
Signatures
Files
-
SeroXen.exe.exe windows:4 windows x64 arch:x64
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
28:51:0d:78:56:26:44:86:4f:77:90:84:22:31:00:38Certificate
IssuerCN={37461E0F-BE27-431A-B6C7-06F5933648BC}Not Before26/08/2023, 07:20Not After25/08/2024, 13:20SubjectCN={37461E0F-BE27-431A-B6C7-06F5933648BC}e3:0d:04:62:0e:c7:ae:44:50:31:4e:0c:dc:8e:03:e0:ae:76:de:64Signer
Actual PE Digeste3:0d:04:62:0e:c7:ae:44:50:31:4e:0c:dc:8e:03:e0:ae:76:de:64Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\C5\Documents\SeroXen Stuff\Quasar-master\Quasar-master-release\bin\Release\net452\REPOS\SeroXen_Initializer\SeroXen\SeroXen\bin\x64\Release\SeroXen.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 359KB - Virtual size: 359KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ