vapeloader[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

vapeloader.exe
Size

10.1MB
MD5

199d94ebf019b184b1b48969057ff9b6
SHA1

202a394f82d8749d3ae6ac7d5c8ffffa25bfd4e4
SHA256

cd27ec96fe3d2a0af36850ce3afe48ff9b32023f061d7a48c66d7810672c945b
SHA512

43fbd41f742d666af1d0791dce7fe8044c8bd78dfd4b9a3e12fa83e91ccf5bad912bf7b5cc5e5db512dd967c7c873ba56ee688bd4eb821055f2ce82a5087806f
SSDEEP

196608:0YJsGgYL75KCTu2Tf/PPHj/WJ8zrSOOMfkAQmkfBvU:00sGgYH5XFTf/3j/PSOrkjM

Score

1^/10

Malware Config

Signatures

Files

vapeloader.exe
.exe windows x64

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:cf:c3:a1:a2:b8:f9:9b:5d:db:9a:c9:37:27:70:35
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

06/07/2020, 00:00

Not After

14/07/2021, 12:00

Subject

SERIALNUMBER=M097126,CN=Manthe Industries\, LLC,O=Manthe Industries\, LLC,L=STEVENS POINT,ST=WISCONSIN,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1309576973636f6e73696e,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

88:16:4c:2b:d6:a0:bf:6f:3d:aa:6a:37:42:54:5b:2f:73:64:cb:41
Signer

Actual PE Digest

88:16:4c:2b:d6:a0:bf:6f:3d:aa:6a:37:42:54:5b:2f:73:64:cb:41

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 849KB - Virtual size: 848KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 532KB - Virtual size: 566KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 8.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 5.8MB - Virtual size: 5.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 364B - Virtual size: 4KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77Certificate

Key Usages

0c:cf:c3:a1:a2:b8:f9:9b:5d:db:9a:c9:37:27:70:35Certificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

88:16:4c:2b:d6:a0:bf:6f:3d:aa:6a:37:42:54:5b:2f:73:64:cb:41Signer

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 2.7MB - Virtual size: 2.7MB

.rdata Size: 849KB - Virtual size: 848KB

.data Size: 532KB - Virtual size: 566KB

.pdata Size: 181KB - Virtual size: 181KB

.data Size: 512B - Virtual size: 488B

.reloc Size: 31KB - Virtual size: 30KB

.idata Size: 2KB - Virtual size: 4KB

.tls Size: 512B - Virtual size: 4KB

.rsrc Size: 9KB - Virtual size: 9KB

.text Size: - Virtual size: 8.4MB

.text Size: 5.8MB - Virtual size: 5.8MB

.data Size: 18KB - Virtual size: 18KB

.data Size: 20KB - Virtual size: 20KB

.reloc Size: 364B - Virtual size: 4KB

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

0c:cf:c3:a1:a2:b8:f9:9b:5d:db:9a:c9:37:27:70:35
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

88:16:4c:2b:d6:a0:bf:6f:3d:aa:6a:37:42:54:5b:2f:73:64:cb:41
Signer

.text
Size: 2.7MB - Virtual size: 2.7MB

.rdata
Size: 849KB - Virtual size: 848KB

.data
Size: 532KB - Virtual size: 566KB

.pdata
Size: 181KB - Virtual size: 181KB

.data
Size: 512B - Virtual size: 488B

.reloc
Size: 31KB - Virtual size: 30KB

.idata
Size: 2KB - Virtual size: 4KB

.tls
Size: 512B - Virtual size: 4KB

.rsrc
Size: 9KB - Virtual size: 9KB

.text
Size: - Virtual size: 8.4MB

.text
Size: 5.8MB - Virtual size: 5.8MB

.data
Size: 18KB - Virtual size: 18KB

.data
Size: 20KB - Virtual size: 20KB

.reloc
Size: 364B - Virtual size: 4KB