VapeLight[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
VapeLight.exe
Size 45KB
Sample260822-3ar5bagg46
SHA256 4a7c985c10a97d95a1c99789a03bf2f54661bed82b2a997c7a9e901febba449d
MD5 e6ee622599d08cce23640e5d8cd70489
SHA1 96fc425d870d12419fdd942ef0e27cfc3ac03d30
SHA512 be8c1692ec70632dd65decd79214c3e46548bfaa7bb72c35dcf2cb1eee0566d296a7018a0eddf04b220fc5cb1342d23d66b436858cc6cc5737b82cc678b23520
SSDEEP 768:Cr8LiHlnp7dS694w4h5fK/ZJbSOn4ZeTvOs3I:S8LYltdn4w0fKRJbSgvq
TLSH
T1F723C526CD56917BE32A8E74CA134904DE637CD29BB0B5CF93805CE60F66AD49B3D702
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VapeLight.exe

File Explorer

VapeLight.exe

.exe 45KB

VapeLight.exe

IMPHASH d8947aee4a2a540a554c1e9019f53447
SHA256 4a7c985c10a97d95a1c99789a03bf2f54661bed82b2a997c7a9e901febba449d
MD5 e6ee622599d08cce23640e5d8cd70489
SHA1 96fc425d870d12419fdd942ef0e27cfc3ac03d30
SHA512 be8c1692ec70632dd65decd79214c3e46548bfaa7bb72c35dcf2cb1eee0566d296a7018a0eddf04b220fc5cb1342d23d66b436858cc6cc5737b82cc678b23520
SSDEEP 768:Cr8LiHlnp7dS694w4h5fK/ZJbSOn4ZeTvOs3I:S8LYltdn4w0fKRJbSgvq
TLSH
T1F723C526CD56917BE32A8E74CA134904DE637CD29BB0B5CF93805CE60F66AD49B3D702
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

21536

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetLastError WaitForSingleObject GetCurrentProcess CreateRemoteThread OpenProcess VirtualAllocEx WriteProcessMemory VirtualFreeEx GetModuleFileNameW GetModuleHandleW GetProcAddress CloseHandle SetConsoleOutputCP SetConsoleTextAttribute SetConsoleTitleW CreateToolhelp32Snapshot Process32FirstW Process32NextW SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter GetFileAttributesW SetConsoleCP GetStdHandle

user32

GetWindowTextW EnumWindows IsWindowVisible GetWindowThreadProcessId

advapi32

OpenProcessToken AdjustTokenPrivileges

msvcp140

?uncaught_exception@std@@YA_NXZ ?good@ios_base@std@@QEBA_NXZ ?flags@ios_base@std@@QEBAHXZ ?width@ios_base@std@@QEBA_JXZ ?width@ios_base@std@@QEAA_J_J@Z ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z ?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ ?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ ?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WXZ ?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z ?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAH@Z ?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAGXZ ?wcin@std@@3V?$basic_istream@_WU?$char_traits@_W@std@@@1@A ?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A ?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

memset memmove __C_specific_handler __current_exception __current_exception_context memcpy _CxxThrowException __std_terminate memcmp __std_exception_destroy __std_exception_copy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

towlower wcslen

api-ms-win-crt-heap-l1-1-0

free _set_new_mode malloc _callnewh

api-ms-win-crt-runtime-l1-1-0

__p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment __p___argc _initialize_onexit_table _register_onexit_function _crt_atexit terminate _configure_narrow_argv exit _set_app_type _exit _seh_filter_exe

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale