Vant[.]exe | Triage™

Resubmissions

10/07/2026, 13:30

260710-qr4hfscv7t

10/07/2026, 13:28

260710-qqt8dsat4n3

Sharing

Copy URL Twitter E-mail

General

Target
Vant.exe
Size 1.5MB
Sample260710-qqt8dsat4n
SHA256 949329f786bb49cb1a1ac3f65441d44f6e787c2b60c9b69aba4598a13e141f51
MD5 ae640e3cacde24abe978de7634a83515
SHA1 10779bbf1e87a188348292beb5d7c14d25ba999c
SHA512 99ccab69ccdff93d7cc79c366dc4cce9b2711221b2a98dd382882816c26ea097427e1882ad8c81ad482f3698c68aac79a2577143e2cfe272d404f060db8cf80e
SSDEEP 49152:/2hojqlM3+pwrytUgVfiXMZuz4V6vp8h5KQ2hojqlM3+ps2hojqlM3+pwrytMS2V:Qm3Ynd
TLSH
T14D757DA4D2044159F0B5DB70D70BA98AE5BABC0D43107CF715C2B6FA26332F25A7AB53
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Vant.exe

File Explorer

Vant.exe

.exe 1.5MB

Vant.exe

IMPHASH e5deb14283654d2d59e717083a5ad795
SHA256 949329f786bb49cb1a1ac3f65441d44f6e787c2b60c9b69aba4598a13e141f51
MD5 ae640e3cacde24abe978de7634a83515
SHA1 10779bbf1e87a188348292beb5d7c14d25ba999c
SHA512 99ccab69ccdff93d7cc79c366dc4cce9b2711221b2a98dd382882816c26ea097427e1882ad8c81ad482f3698c68aac79a2577143e2cfe272d404f060db8cf80e
SSDEEP 49152:/2hojqlM3+pwrytUgVfiXMZuz4V6vp8h5KQ2hojqlM3+ps2hojqlM3+pwrytMS2V:Qm3Ynd
TLSH
T14D757DA4D2044159F0B5DB70D70BA98AE5BABC0D43107CF715C2B6FA26332F25A7AB53
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1067288

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

AllocConsole SetConsoleTitleW CreateToolhelp32Snapshot Module32FirstW Module32NextW Sleep K32GetModuleFileNameExA GetCurrentProcessId GetModuleHandleW ReadFile GetTempPathW CreateFileW LoadLibraryW GetProcAddress FreeLibrary MultiByteToWideChar QueryPerformanceFrequency QueryPerformanceCounter GetTickCount GetCurrentProcess Thread32Next Thread32First GetVolumeInformationA GetCurrentThreadId GetModuleHandleA GetLastError Process32NextW Process32FirstW GetThreadContext SystemTimeToTzSpecificLocalTime K32EnumProcessModules GetSystemTime OpenThread IsDebuggerPresent GetComputerNameA CheckRemoteDebuggerPresent GetFileAttributesW OutputDebugStringA OutputDebugStringW GetModuleFileNameW GetProcessHeap HeapFree LoadLibraryExW GetEnvironmentVariableW SetConsoleOutputCP SetEndOfFile ReadConsoleW HeapReAlloc HeapSize GetConsoleOutputCP ReadProcessMemory GetStringTypeW SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose SetFilePointerEx GetFileSizeEx GetFileAttributesExW CreateProcessW GetExitCodeProcess GetFileType LCMapStringW CompareStringW VirtualProtect HeapAlloc UnhandledExceptionFilter RtlVirtualUnwind RtlCaptureContext TerminateProcess WriteFile IsProcessorFeaturePresent QueryFullProcessImageNameW WriteConsoleW GetConsoleWindow ExitProcess FreeConsole CloseHandle GetConsoleMode OpenProcess WaitForSingleObject SetConsoleMode GetStdHandle WriteProcessMemory GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection EncodePointer FlushFileBuffers SetConsoleCtrlHandler FlsFree FlsSetValue FlsGetValue FlsAlloc SetLastError RaiseException RtlPcToFileHeader RtlUnwindEx RtlLookupFunctionEntry GetStartupInfoW SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime WakeAllConditionVariable GetExitCodeThread WaitForSingleObjectEx SleepConditionVariableSRW GetSystemTimePreciseAsFileTime ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockShared

user32

DefWindowProcW SetForegroundWindow ReleaseCapture LoadCursorW SetWindowDisplayAffinity GetWindowLongPtrW GetWindowRect DrawMenuBar FindWindowW MessageBoxA GetAsyncKeyState ShowWindow DeleteMenu PostMessageW DestroyWindow GetWindowThreadProcessId GetClientRect GetWindowTextW UpdateWindow PostQuitMessage TranslateMessage SetLayeredWindowAttributes EnumWindows GetForegroundWindow PeekMessageW ClientToScreen DispatchMessageW RegisterClassExW UnregisterClassW CreateWindowExW SetWindowPos GetSystemMenu IsWindow GetSystemMetrics ScreenToClient SendInput GetCursorPos SetWindowRgn SendMessageW IsIconic GetMessageW MessageBoxW SetWindowLongPtrW IsWindowVisible

gdi32

GetStockObject CreateRoundRectRgn

advapi32

RegOpenKeyExW EventSetInformation RegGetValueW RegCloseKey RegQueryValueExW EventRegister EventUnregister EventWriteTransfer

shell32

SHGetFolderPathW

ole32

CoInitializeEx CoTaskMemFree CoUninitialize

d3d11

D3D11CreateDeviceAndSwapChain

d2d1

ord1

dwrite

DWriteCreateFactory

bcrypt

BCryptGenRandom

dwmapi

DwmFlush DwmExtendFrameIntoClientArea

winmm

timeBeginPeriod timeEndPeriod

wininet

HttpSendRequestA InternetReadFile InternetSetOptionW InternetConnectA HttpQueryInfoA InternetCloseHandle InternetOpenA HttpOpenRequestA

winhttp

WinHttpQueryDataAvailable WinHttpConnect WinHttpSendRequest WinHttpCloseHandle WinHttpOpenRequest WinHttpReadData WinHttpOpen WinHttpReceiveResponse

Name

.text

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

135KB

Virtual Size

135KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

173KB

Virtual Size

173KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

Vant.exe

kernel32

user32

gdi32

advapi32

shell32

ole32

d3d11

d2d1

dwrite

bcrypt

dwmapi

winmm

wininet

winhttp

generic