Vape421Native[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
Vape421Native.dll
Size 15.8MB
Sample260731-2bd4easdpf
SHA256 d8df40a7ad601f3da524640b2859bc0957959434908ebf96b5a1fb30dc504b9f
MD5 71acb4e900589a274bc9b999a86d6cc2
SHA1 4a57de1828540296dac6ae367df4dd4a82d3c8b0
SHA512 f9126515efed18b39328a0f5711bbf42c75e3d9dc7563690c3bb9a7e73024702124d7b7fae236f8cf5edf75d10332f494c9a1f848778d7c2e745a9bd57f8316e
SSDEEP 393216:VpkcVGnKiKR8XvY4aQQa6vi5f55oijBqVH5:VycVHR8XTQhqNsiIH
TLSH
T1B3F612A3EAE8643EE6BB5132639402377E3E87C8E10750D514B879D258B7C8D6F503AD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Vape421Native.dll

File Explorer

Vape421Native.dll

.dll 15.8MB

Vape421Native.dll

IMPHASH 1252db5025ef001fb0f26d09ff9969d4
SHA256 d8df40a7ad601f3da524640b2859bc0957959434908ebf96b5a1fb30dc504b9f
MD5 71acb4e900589a274bc9b999a86d6cc2
SHA1 4a57de1828540296dac6ae367df4dd4a82d3c8b0
SHA512 f9126515efed18b39328a0f5711bbf42c75e3d9dc7563690c3bb9a7e73024702124d7b7fae236f8cf5edf75d10332f494c9a1f848778d7c2e745a9bd57f8316e
SSDEEP 393216:VpkcVGnKiKR8XvY4aQQa6vi5f55oijBqVH5:VycVHR8XTQhqNsiIH
TLSH
T1B3F612A3EAE8643EE6BB5132639402377E3E87C8E10750D514B879D258B7C8D6F503AD
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

24356

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

user32

GetKeyNameTextA GetAsyncKeyState EmptyClipboard SetClipboardData CloseClipboard OpenClipboard IsWindow CallWindowProcW DefWindowProcW PostMessageA PeekMessageW DispatchMessageW GetWindowThreadProcessId GetClassNameW EnumWindows SetWindowLongPtrW GetCursorPos GetForegroundWindow TranslateMessage MapVirtualKeyA

ws2_32

connect closesocket htons recv WSACleanup send setsockopt shutdown socket WSAStartup htonl

kernel32

OpenFileMappingW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GlobalFree GlobalLock GlobalUnlock GlobalAlloc GetProcessHeap HeapFree HeapAlloc SetLastError UnmapViewOfFile MapViewOfFile OpenEventW SetEvent InitOnceExecuteOnce AcquireSRWLockExclusive ReleaseSRWLockExclusive SetEnvironmentVariableA FindResourceW SizeofResource CreateDirectoryW CreateFileW DeleteFileW FlushFileBuffers WriteFile GetTempPathW OutputDebugStringW CloseHandle GetLastError Sleep GetCurrentProcessId CreateThread GetLocalTime DisableThreadLibraryCalls FreeLibraryAndExitThread GetModuleFileNameW GetModuleHandleW GetModuleHandleExW GetProcAddress LoadResource LockResource

vcruntime140

memchr memset __C_specific_handler __std_type_info_destroy_list memcpy wcsrchr

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnwprintf_s fputws fclose __stdio_common_vsnprintf_s _wfopen_s

api-ms-win-crt-string-l1-1-0

strlen wcscmp strcpy_s strcmp wcslen

api-ms-win-crt-heap-l1-1-0

calloc free

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table _execute_onexit_table _initialize_narrow_environment _cexit _configure_narrow_argv _seh_filter_dll _initterm _initterm_e