VapeV4Injector[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
VapeV4Injector.exe
Size 51KB
Sample260804-dn49cscb22
SHA256 45bb43f7851538d7793a86b2ba0fa5ee4ef8e067484dfdbdc0661effed2d5389
MD5 30396ae06e575160cd1cd8c93a7f4ab2
SHA1 95609e1a074aac2c8ea912972bb1a2e2f9921f68
SHA512 16abab45555d973b1d2541e7ce9730173fa637f6caf4b8b734e096559713d2fbdb6580d6134c8b3796903951187d9b126e7636c53fa75685bccb4e8bda100b54
SSDEEP 768:MYTs8p1yXPdl9rlXv2Kzc3Fr+ExL6l4/PaL+qk/3A:j1yXPdltleKWxL6/L+q7
TLSH
T1E033E81ADE2A806BD39A9D78D9430905DD73BC864BE1F5CF97406CD60D36AD89B3E302
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VapeV4Injector.exe

File Explorer

VapeV4Injector.exe

.exe 51KB

VapeV4Injector.exe

IMPHASH 81f8a71a89d1dca451a6d3a8f41a90a0
SHA256 45bb43f7851538d7793a86b2ba0fa5ee4ef8e067484dfdbdc0661effed2d5389
MD5 30396ae06e575160cd1cd8c93a7f4ab2
SHA1 95609e1a074aac2c8ea912972bb1a2e2f9921f68
SHA512 16abab45555d973b1d2541e7ce9730173fa637f6caf4b8b734e096559713d2fbdb6580d6134c8b3796903951187d9b126e7636c53fa75685bccb4e8bda100b54
SSDEEP 768:MYTs8p1yXPdl9rlXv2Kzc3Fr+ExL6l4/PaL+qk/3A:j1yXPdltleKWxL6/L+q7
TLSH
T1E033E81ADE2A806BD39A9D78D9430905DD73BC864BE1F5CF97406CD60D36AD89B3E302
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

23088

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\knze2\source\repos\SlinklyInjectorv3\x64\Release\SlinklyInjectorv3.pdb

kernel32

OpenProcess CreateToolhelp32Snapshot Sleep GetLastError Process32NextW Process32FirstW WaitForSingleObject GetProcAddress VirtualAllocEx GetModuleHandleW CreateRemoteThread VirtualFreeEx GetCurrentDirectoryW GetModuleFileNameW GetCurrentProcess CloseHandle WriteProcessMemory FindClose FindFirstFileW GetFileAttributesExW CreateFile2 AreFileApisANSI GetFileInformationByHandleEx WideCharToMultiByte LocalFree FormatMessageA GetLocaleInfoEx QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter

advapi32

AdjustTokenPrivileges OpenProcessToken LookupPrivilegeValueW

msvcp140

?good@ios_base@std@@QEBA_NXZ ?uncaught_exceptions@std@@YAHXZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A ?_Xout_of_range@std@@YAXPEBD@Z ?_Winerror_map@std@@YAHH@Z ?_Xlength_error@std@@YAXPEBD@Z ?_Syserror_map@std@@YAPEBDH@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ ?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z ?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ

urlmon

URLDownloadToFileW

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_exception_destroy __std_exception_copy __std_terminate memcpy __current_exception_context __current_exception _CxxThrowException __C_specific_handler memset memmove

api-ms-win-crt-heap-l1-1-0

free malloc _callnewh _set_new_mode

api-ms-win-crt-runtime-l1-1-0

terminate _register_onexit_function _initialize_onexit_table abort _crt_atexit _register_thread_local_exe_atexit_callback _c_exit system __p___argv __p___argc _seh_filter_exe _exit exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv _cexit _set_app_type

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func _configthreadlocale

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-string-l1-1-0

wcslen strlen