Vape Launcher.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Vape Launcher.exe
Resource
win11-20240802-en
General
-
Target
Vape Launcher.exe
-
Size
60.3MB
-
MD5
73ea53e2da8be95a006d7ba6dd4f0534
-
SHA1
880809840d5a6744943e768d8ac021e28dcf8e15
-
SHA256
319a145536f32881604eaf8ed2a20de6d2f496ff5229d9ad92eafc64314acf64
-
SHA512
65c36fe3e1fc6d0d4a5ba52812d8c6fa74207dc25adab4f321c916cc777ce5fc17d9c12277d273981f8e0642d7054b677a5dbd9467cb4f54a431dc57c74500f3
-
SSDEEP
1572864:i99RQ4pTVQR8lN2S0qicZIYbXJ++ZdNeEcFBqUFmg:itPxmRevM3EGsU0g
Malware Config
Signatures
-
Detected Nirsoft tools 1 IoCs
Free utilities often used by attackers which can steal passwords, product keys, etc.
resource yara_rule sample Nirsoft -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Vape Launcher.exe
Files
-
Vape Launcher.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
VJ{1[4F( Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 60.3MB - Virtual size: 60.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ