VapeV4[.]21[.]dll | Triage™

General

Target
VapeV4.21.dll
Size 11.5MB
Sample260711-m5dbmsax7s
SHA256 32aa9efccbaac85ed9686dab7f5f6618a3e3dd6d7541908d99a5f237a74d71ed
MD5 a1b8fcc4c6553319b449fff275c6a361
SHA1 3d2785fc84487adf72f016e39bbf51588c3c0260
SHA512 781f0643822b1336273c808a5062c4ea5cbce240a13135811641091b80a8c18d7a80a5756e4238624a39649441ed28e2b5f046e75f7e5ac88de74ff1c066c2a7
SSDEEP 196608:pw1sA0uGaLD7twHZdtYEP46TwU1ALA4Z+XxLs1oHjUrj9j5pBG3GyFqQhnXQFF10:pw90hgD7tw5XbeUasWIxI1oHjUTG3GyD
TLSH
T183C633AB71980897E1BF5038C2278132F720605A6B91E79F9398976F9E337F049F5394
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VapeV4.21.dll

File Explorer

VapeV4.21.dll

.dll 11.5MB

VapeV4.21.dll

IMPHASH f7b8b237e74859906453764b0cc98b2c
SHA256 32aa9efccbaac85ed9686dab7f5f6618a3e3dd6d7541908d99a5f237a74d71ed
MD5 a1b8fcc4c6553319b449fff275c6a361
SHA1 3d2785fc84487adf72f016e39bbf51588c3c0260
SHA512 781f0643822b1336273c808a5062c4ea5cbce240a13135811641091b80a8c18d7a80a5756e4238624a39649441ed28e2b5f046e75f7e5ac88de74ff1c066c2a7
SSDEEP 196608:pw1sA0uGaLD7twHZdtYEP46TwU1ALA4Z+XxLs1oHjUrj9j5pBG3GyFqQhnXQFF10:pw90hgD7tw5XbeUasWIxI1oHjUTG3GyD
TLSH
T183C633AB71980897E1BF5038C2278132F720605A6B91E79F9398976F9E337F049F5394
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

74432

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

user32

DispatchMessageA GetClassNameW GetCursorPos MessageBoxA GetForegroundWindow MapVirtualKeyA GetKeyNameTextA GetAsyncKeyState PostMessageA PeekMessageA TranslateMessage

kernel32

GetModuleHandleExW WriteConsoleW CreateFileW SetFilePointerEx GetConsoleMode GetConsoleOutputCP WriteFile FlushFileBuffers CloseHandle CreateThread ExitThread DisableThreadLibraryCalls FreeLibraryAndExitThread GetModuleHandleA GetProcAddress RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetStdHandle RtlPcToFileHeader RaiseException RtlUnwindEx InterlockedFlushSList GetLastError SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleFileNameW HeapFree HeapAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect LCMapStringW GetProcessHeap GetStdHandle GetFileType GetStringTypeW HeapSize HeapReAlloc

Name

.text

Size

129KB

Virtual Size

128KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

11.4MB

Virtual Size

11.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

VapeV4.21.dll

user32

kernel32

generic