vape[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

vape.exe
Size

109KB
MD5

04fceee7ab6fa7b90ff6154a8e3e6e00
SHA1

9722b28e33c1d459859244a7b01502aea1589fae
SHA256

8d782dc32bdf28cdb0daeb243dad8b3ffbc99d1df86c65e6bf5de763ce658d64
SHA512

935d77e5c6373d44a8f7d205bb4829ce02dc7566f3741a7c850462c1cfdee78087dd5af7589d5eaf2426d6c4287ef182e90e7c74b615551e5768932cdf88c8f6
SSDEEP

384:SLeawoa9LzdaLifS3hPLTuyTUOA0a1poX/BuZnDyqlUNf6JLSM:M9woa9so+IywOAjfZPJLSM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
vape.exe

Files

vape.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ