vape_4[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

vape_4.exe
Size

2.5MB
MD5

bbdd362e78ebee8e2b7df8097cc9fcd1
SHA1

00320e960c2adc09c65687799ea0a1cc87e31e59
SHA256

e764ce2495d6ecdc1adffb0481bd65a70585efdb0f497d6a915df7f90144f2e3
SHA512

f201cb44c5b22f9169b9c9e229173ed5310995507a45cc7dbba44b74f684137e77bf92b571984330281a16b01287f7b6fe0546f7439f43e78e3faca5200c86d7
SSDEEP

49152:PvWxBEICg6GLwD7PSi3NbKWS63yX5mYiYl2yq3vX++4UWC0a/8aZH4:PJgxwDD/KWv3amYiVt3vX+rUIao

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
vape_4.exe

Files

vape_4.exe
.exe windows x64

7dbd2319b33ed25eb7ad7d0162c2bb3a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

malloc
memset
_get_pgmptr
sprintf
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit

kernel32

Sleep
GetWindowsDirectoryA
CreateProcessA
SetUnhandledExceptionFilter

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ