vapev4121.zip
- SHA256 2375cd6683ccac0c23d29b7fad475cefafb7cd3dc602cbc8d8d712aaf8cc9d2e
Overview
overview
3Static
static
3Vape421Injector.exe
windows10-2004-x64
1Vape421Injector.exe
windows11-ltsc_2024-x64
1Vape421Native.dll
windows10-2004-x64
1Vape421Native.dll
windows11-ltsc_2024-x64
1start-loader.cmd
windows10-2004-x64
3start-loader.cmd
windows11-ltsc_2024-x64
3start-service.cmd
windows10-2004-x64
3start-service.cmd
windows11-ltsc_2024-x64
3vape-v4-co...64.exe
windows10-2004-x64
1vape-v4-co...64.exe
windows11-ltsc_2024-x64
1vape421-ex....0.jar
windows10-2004-x64
1vape421-ex....0.jar
windows11-ltsc_2024-x64
1Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Vape421Injector.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Vape421Injector.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
Vape421Native.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Vape421Native.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
start-loader.cmd
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
start-loader.cmd
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral7
Sample
start-service.cmd
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral8
Sample
start-service.cmd
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral9
Sample
vape-v4-controller-windows-x64.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
vape-v4-controller-windows-x64.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
vape421-experimental-service-0.1.0.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
vape421-experimental-service-0.1.0.jar
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target vapev4121.zip
- Size 25.0MB
- Sample260825-3m33caxtbz
- SHA256 2375cd6683ccac0c23d29b7fad475cefafb7cd3dc602cbc8d8d712aaf8cc9d2e
- MD5 4e00123171c4e38788cd2244dde2b741
- SHA1 0976de738395b523aa6143f2aadd233f98df0257
- SHA512 115c38fa074c8395e3370de614681ebbed6dfbfbeaa42ad184848124f94b857cd2a636a55cb1d4bbf881ec490f7f882cc830bf4df51a022ceea510329acc52dd
- SSDEEP 393216:hudNt79nPIkPlJjiHVKRqz0GUkm7D8FdzKvOgcutKPhZlKMDvDHFXJQ0mqq:hiRwkPeHoYz0GUkm7wbA1KDlTp5DY
- TLSH T10F47330A0977BE9FAA327070115753898638490D53B3FEB0FBBAB829D71C6D4E355B08
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned JAR 1 IoCs
Checks for missing JAR codesign signature.
resource unpack001/vape421-experimental-service-0.1.0.jar - Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/Vape421Injector.exe unpack001/Vape421Native.dll unpack001/vape-v4-controller-windows-x64.exe
File Explorer
-
vapev4121.zip.zip 25.0MB
-
README.md3KB
-
Vape421Injector.exe.exe 19KB
-
Vape421Native.dll.dll 21.2MB
-
data/vape-service.json125KB
-
start-loader.cmd359B
-
start-service.cmd.cmd .vbs 718B
-
vape-v4-controller-windows-x64.exe.exe 491KB
-
vape421-experimental-service-0.1.0.jar.jar 5.1MB
-
vape421-native.log27KB
README.md
- SHA256 fe95fc4b44bc961f1b7e720f6af2da04f84d8cb0ce942e130488b61975fd6d0a
- MD5 6355f69cf28ef9e6de1fc79084d846c7
- SHA1 f0dcb9d1edae10fbf2db3264df374a7ae3d7b458
- SHA512 9a1455a0eb4fc0708d79af9a635ec4948de393b72a39b97e3fcc01f2cab6406b4498f709e8f801ca35f4ff3746f0d7c811cc00722cfc3c6f6ace1f4ae2892812
- TLSH T1B7610925AA69B27A6A51C3066F452DC2CD2EC17B432431E642EE401C19264E5EBBF751
- MD5 SHA1 SHA512 TLSH
Vape421Injector.exe
- IMPHASH 5b1555628e9e584768dddfb3474e9316
- SHA256 f460ccf78096c85637aa674f0b7831fd8df3404d831c7f5e8ed748d0a09dbb86
- MD5 fcb2545d84afa2342f010cd3754a9b41
- SHA1 b5d0ec876d5a40489e6d30f5e4f3c687086dcf91
- SHA512 66eadbab5643cf5a21436504feba74b93a2a9cc5733c3aa79dc4761b8a346d3e0aa426429849bfa6787ede41496f9e791f477e54f84f41e72dee920ef53b5311
- SSDEEP 384:5A/ECKdlD2yMHBax+MeUhWNGHb7trkUVwdfnz7e91Fz:5A/GdlavBk+MeUTJknk1
- TLSH T1BF923A467BF525D9E1BBE6368832B136E67178165B33868F0358801C0EB2B90BD79F47
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
8976
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
GetStdHandle
GetFileAttributesW
GetFullPathNameW
CloseHandle
GetLastError
WaitForSingleObject
Sleep
CreateRemoteThread
OpenProcess
GetTickCount64
VirtualAllocEx
WriteProcessMemory
VirtualFreeEx
IsWow64Process
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
LocalFree
FormatMessageW
FillConsoleOutputCharacterW
FillConsoleOutputAttribute
GetConsoleCursorInfo
SetConsoleCursorInfo
GetConsoleScreenBufferInfo
SetConsoleCursorPosition
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
Module32FirstW
Module32NextW
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlCaptureContext
user32
IsWindowVisible
GetWindowTextW
GetWindowTextLengthW
EnumWindows
GetWindowThreadProcessId
vcruntime140
memset
memcpy
__C_specific_handler
__current_exception
__current_exception_context
wcsrchr
api-ms-win-crt-string-l1-1-0
wcscpy
wcslen
wcsncpy
_wcsicmp
api-ms-win-crt-conio-l1-1-0
_getwch
api-ms-win-crt-stdio-l1-1-0
fflush
__p__commode
__acrt_iob_func
_set_fmode
_kbhit
__stdio_common_vfwprintf
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-convert-l1-1-0
wcstoul
api-ms-win-crt-runtime-l1-1-0
_register_thread_local_exe_atexit_callback
_c_exit
_exit
_seh_filter_exe
exit
_initialize_onexit_table
_cexit
_crt_atexit
terminate
_set_app_type
_initterm_e
__p___wargv
_initterm
_get_initial_wide_environment
_configure_wide_argv
_register_onexit_function
__p___argc
_initialize_wide_environment
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
600B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
48B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35207,
count=4, id=259, version=35207,
count=10, id=260, version=35207,
count=19, id=261, version=35207,
count=5, id=257, version=33145,
count=96, id=1, productName=Unmarked objects,
count=1, id=260, version=35228,
count=1, id=255, version=35228,
count=1, id=258, version=35228,
Vape421Native.dll
- IMPHASH 9b55a896b8e7b2854cb7692d5270dd76
- SHA256 ec4e0ffd82456f2a6912334b7fe06b360296863483351f2198bb52b0895cd549
- MD5 7242a5ee108672a455d67b6f1786bf03
- SHA1 8c8853b993f36f690291dc822c7c3f7202b52328
- SHA512 4b4f885d18dd2d0ca79560ef870c9517c4c893b739291b17a7e31031bad85a13588ebb6d54f95e518b0222729dec1f4fa938dcc91f2ac7e6f1aa54b6284cf450
- SSDEEP 393216:7wEWWOqSQ88V78epoXvghLlwgcVEHw4tvtLTQlffWBqVHv:7TWWU8VQUo8pw5VqwgFn+frH
- TLSH T1C9271293E8E9643EEABB4537628802777E3E87C8E50750D114B879D264B7C8D4F603AD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
27876
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
user32
GetKeyNameTextA
GetAsyncKeyState
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
IsWindow
CallWindowProcW
DefWindowProcW
PostMessageW
PeekMessageW
DispatchMessageW
GetWindowThreadProcessId
GetClassNameW
EnumWindows
SetWindowLongPtrW
ScreenToClient
GetCursorPos
GetForegroundWindow
TranslateMessage
MapVirtualKeyA
ws2_32
connect
closesocket
htons
recv
WSACleanup
send
setsockopt
shutdown
socket
WSAStartup
htonl
kernel32
OpenFileMappingW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
GetProcessHeap
HeapFree
HeapAlloc
SetLastError
UnmapViewOfFile
MapViewOfFile
OpenEventW
SetEvent
InitOnceExecuteOnce
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
SetEnvironmentVariableA
FindResourceW
SizeofResource
LockResource
CreateDirectoryW
CreateFileW
DeleteFileW
FlushFileBuffers
WriteFile
GetTempPathW
OutputDebugStringW
CloseHandle
GetLastError
Sleep
GetCurrentProcessId
CreateThread
GetLocalTime
DisableThreadLibraryCalls
FreeLibraryAndExitThread
GetModuleFileNameW
GetModuleHandleW
GetModuleHandleExW
GetProcAddress
LoadResource
vcruntime140
memchr
memset
__C_specific_handler
__std_type_info_destroy_list
memcpy
wcsrchr
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsnwprintf_s
fputws
fclose
__stdio_common_vsnprintf_s
_wfopen_s
api-ms-win-crt-string-l1-1-0
strlen
wcscmp
strcpy_s
strcmp
wcslen
api-ms-win-crt-heap-l1-1-0
calloc
free
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_execute_onexit_table
_initialize_narrow_environment
_cexit
_configure_narrow_argv
_seh_filter_dll
_initterm
_initterm_e
JNI_OnLoad
JNI_OnUnload
Name
.text
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
21.2MB
Virtual Size
21.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
124B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35207,
count=4, id=259, version=35207,
count=8, id=260, version=35207,
count=12, id=261, version=35207,
count=7, id=257, version=33145,
count=118, id=1, productName=Unmarked objects,
count=3, id=260, version=35228,
count=1, id=256, version=35228,
count=1, id=255, version=35228,
count=1, id=151,
count=1, id=258, version=35228,
data/vape-service.json
- SHA256 e76cc6bca8aa006b5aad6442e5cdb37d09d9a860db0caf7164121973afba6817
- MD5 00ed8ac8955eb0431f7bd5b7d4690a05
- SHA1 de351d8095f4d32cf60ca01abb262ed919842807
- SHA512 7918e5c5977d4ec2ec1223d7690f9042835d67908ca0d22cefc7d101fae22b9b60341c2101143ce7c226765988a2feaba1df4b0e59ecdf956e54e2228740b466
- SSDEEP 384:VOY9vRqI0d0Zqc6JbqV2JPIOzOeBdFvxdSuYSyini9RC5CziYCrGYffLWw7Jz8VP:oZ6NsYziniXC5CWYrYfC
- TLSH T123C3F514C5751DBA22A7F2309EBF12432275895F5DA63C383B5C861C9F0E72E2A716EC
- MD5 SHA1 SHA512 SSDEEP TLSH
start-loader.cmd
- SHA256 0e572d506b560063c6388e26b0cca1fe55e15d41a5846df7f3de1048986732a5
- MD5 25c98badf30fec00d57362c48e15912f
- SHA1 df50f5bed4dfd4bd3c1f4af46f815cceca4eb632
- SHA512 394487547a2eb8d227c8b3b99934d3c1c8280480fe2892a9f5fd632fbaa9a929212c854e2d7697816607aa6943ccd1205c5ec53d84f90763bb45b10d015c5dd1
- TLSH T113E097D643D833102D65884917588FDA680FC296C354CB4E201C6B0C188E3CEEB430F4
- MD5 SHA1 SHA512 TLSH
start-service.cmd
- SHA256 153db16192af0ab2f6430ef77c1907ef7dd655a89d8ca2779de223a90ea6eeb0
- MD5 a1635c80077ddcd1a0694b86adf0599f
- SHA1 0ee1901617f910767c91ebcf5ccb37f40cd0d10b
- SHA512 f3b654159422102068e4b9ce4ada702999bd70c6afaab4588cd6c309d7f9eb2982cebf76d2cab309a7632067048ceda114a734061836f54140b300bf004cee5c
- TLSH T17201022AB9C879F5477B01562F251736D20FD9C90329D048614BA26A10EEFEF361A140
- MD5 SHA1 SHA512 TLSH
vape-v4-controller-windows-x64.exe
- IMPHASH b491917b0a0958e2e3f3effe5ededf6c
- SHA256 2725982207ab328870a2d118862898d823c485a338fab0c3ac9c8b2694e748f7
- MD5 a979a09cc6c9e2647a246714cca1ae6d
- SHA1 05c9da63970c23933557026b60cf0caf48c354dc
- SHA512 0fe07ce358095948beb9bd4708be9adf1433e64fce07361143cec2d97518d857eb3c6e10b416a0d4780d926031fc009fbfe142535c67c5e186c219e82bbd5eb3
- SSDEEP 12288:mH1DmxP6167QBBgVXclgs8nKv32Kw7tjyJmUL2g:mH1DE2wQBYXclgs8nKvG3jyJmUL2g
- TLSH T176B47CE6F2D60DD9D677823C42D6E372B63CBCE447229B97426059312F12ED06EC9782
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4144
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
libgcc_s_seh-1
_Unwind_Resume
libstdc++-6
_ZNKSt8__detail20_Prime_rehash_policy14_M_need_rehashEyyy
_ZNSt6chrono3_V212steady_clock3nowEv
_ZNSt6thread15_M_start_threadESt10unique_ptrINS_6_StateESt14default_deleteIS1_EEPFvvE
_ZNSt6thread4joinEv
_ZNSt6thread6_StateD2Ev
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE10_M_disposeEv
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE15_M_replace_coldEPcyPKcyy
_ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE10_M_disposeEv
_ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE15_M_replace_coldEPwyPKwyy
_ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE6appendEPKwy
_ZSt11_Hash_bytesPKvyy
_ZSt17__throw_bad_allocv
_ZSt19__throw_logic_errorPKc
_ZSt20__throw_length_errorPKc
_ZSt20__throw_system_errori
_ZSt24__throw_out_of_range_fmtPKcz
_ZSt28__throw_bad_array_new_lengthv
_ZSt9terminatev
_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZdlPvy
_Znwy
__gxx_personality_seh0
advapi32
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
gdi32
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
SelectObject
gdiplus
GdipAddPathArc
GdipAlloc
GdipCloneBrush
GdipCloneFontFamily
GdipCloneImage
GdipClosePathFigure
GdipCreateFont
GdipCreateFromHDC
GdipCreateImageAttributes
GdipCreatePath
GdipCreatePen1
GdipCreateRegion
GdipCreateSolidFill
GdipCreateStringFormat
GdipDeleteBrush
GdipDeleteFont
GdipDeleteFontFamily
GdipDeleteGraphics
GdipDeletePath
GdipDeletePen
GdipDeletePrivateFontCollection
GdipDeleteRegion
GdipDeleteStringFormat
GdipDisposeImage
GdipDisposeImageAttributes
GdipDrawImageRect
GdipDrawImageRectRect
GdipDrawLine
GdipDrawPath
GdipDrawString
GdipFillPath
GdipFillRectangle
GdipFree
GdipGetClip
GdipGetFamilyName
GdipGetFontCollectionFamilyList
GdipGetGenericFontFamilySansSerif
GdipLoadImageFromStream
GdipNewPrivateFontCollection
GdipPrivateAddMemoryFont
GdipScaleWorldTransform
GdipSetClipPath
GdipSetClipRegion
GdipSetImageAttributesColorMatrix
GdipSetInterpolationMode
GdipSetSmoothingMode
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipSetStringFormatLineAlign
GdipSetTextRenderingHint
GdiplusShutdown
GdiplusStartup
kernel32
CloseHandle
CreateDirectoryW
CreateEventW
CreateFileMappingW
CreateFileW
CreateRemoteThread
CreateToolhelp32Snapshot
DeleteCriticalSection
EnterCriticalSection
FindResourceW
FreeLibrary
GetCurrentProcess
GetEnvironmentVariableA
GetEnvironmentVariableW
GetExitCodeThread
GetFileAttributesW
GetFileSizeEx
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoW
GetVolumeInformationW
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadResource
LockResource
MapViewOfFile
MulDiv
OpenProcess
Process32FirstW
Process32NextW
ReadFile
SetUnhandledExceptionFilter
SizeofResource
Sleep
TlsGetValue
UnmapViewOfFile
VirtualAllocEx
VirtualFreeEx
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteProcessMemory
__C_specific_handler
api-ms-win-crt-convert-l1-1-0
atoi
mbrtowc
strtol
strtoll
strtoul
strtoull
api-ms-win-crt-environment-l1-1-0
__p__wenviron
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
api-ms-win-crt-heap-l1-1-0
_set_new_mode
calloc
free
malloc
realloc
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
localeconv
api-ms-win-crt-math-l1-1-0
__setusermatherr
exp
api-ms-win-crt-private-l1-1-0
memchr
memcmp
memcpy
memmove
strstr
api-ms-win-crt-runtime-l1-1-0
__p___argc
__p___wargv
__p__wcmdln
_cexit
_configure_wide_argv
_crt_atexit
_errno
_exit
_set_app_type
_initialize_wide_environment
_initterm
_initterm_e
_set_invalid_parameter_handler
abort
exit
signal
strerror
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__p__commode
__p__fmode
__stdio_common_vfprintf
__stdio_common_vfwprintf
__stdio_common_vswprintf_s
_wfopen_s
fclose
fflush
fputwc
getc
setvbuf
ungetc
api-ms-win-crt-string-l1-1-0
_wcsicmp
isdigit
isspace
isxdigit
mbrlen
memset
strlen
strncmp
strnlen
tolower
wcslen
wcsnlen
libwinpthread-1
nanosleep64
pthread_mutex_destroy
pthread_mutex_init
pthread_mutex_lock
pthread_mutex_unlock
shell32
ShellExecuteW
shlwapi
SHCreateMemStream
user32
AdjustWindowRectExForDpi
BeginPaint
CloseClipboard
CreateWindowExW
DefWindowProcW
DestroyWindow
DispatchMessageW
EmptyClipboard
EndPaint
EnumWindows
GetClientRect
GetClipboardData
GetDpiForSystem
GetKeyState
GetMessageW
GetWindowLongPtrW
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
InvalidateRect
IsWindowVisible
KillTimer
LoadCursorW
LoadIconW
OpenClipboard
PostMessageW
PostQuitMessage
RegisterClassExW
SetClipboardData
SetFocus
SetTimer
SetWindowLongPtrW
SetWindowPos
ShowWindow
TrackMouseEvent
TranslateMessage
UpdateWindow
winhttp
WinHttpCloseHandle
WinHttpConnect
WinHttpCrackUrl
WinHttpOpen
WinHttpOpenRequest
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpReadData
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpSetTimeouts
ws2_32
WSACleanup
WSAStartup
accept
bind
closesocket
getsockname
htonl
listen
ntohs
recv
send
shutdown
socket
Name
.text
Size
204KB
Virtual Size
204KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
784B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
117KB
Virtual Size
117KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/14
Size
512B
Virtual Size
80B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/29
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/41
Size
512B
Virtual Size
202B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/55
Size
512B
Virtual Size
164B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/67
Size
512B
Virtual Size
72B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/80
Size
512B
Virtual Size
126B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/91
Size
512B
Virtual Size
378B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
vape421-experimental-service-0.1.0.jar
- SHA256 23c0b50490f624978edc7722a85849b36b000e2f6002e43fc74f2ca0627cf5f2
- MD5 56de43402ecbe43bdd50ea1e52101bbb
- SHA1 a9efc8c4008abd8544f93e3f7e1d1761ff4ee424
- SHA512 388dc4f5550ec02c447dbed6756dd3f282fa43bbc306a782de26e1185b3f019ac10a093a90dd7fac3d80a140113bbadca0f6ec2c7146e889821e793312115772
- SSDEEP 98304:NDieD1JtrKcmMoHDEH0vqqJ7RvozcoUG5YeA4z1HVF/g+geG3CZj1L:UAeDMoQUv3tQzcGKeL11h+eG36xL
- TLSH T1E236E07994DC5465E2A3A23080809873F91C99C8FA1BB8D625F8274764FECC9DFB17C9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned JAR
Checks for missing JAR codesign signature.
vape421-native.log
- SHA256 f64f2e33c1c77f4828e69112981ce7a29bc8ec3ac0846826da34bf7a7f9be209
- MD5 4c31db9154b5e7d0c28ede830b4fa55e
- SHA1 f53b35c0c88aca9e9037c56ded336ad468a32c4c
- SHA512 198719ed615ef2d8e4cde2314bdbc46dd236a2adc60a3e73dcba20a88f69617ca4bcae28b8db9a069cf537002003e18b901e1fa3c237ba743b4034e81ea8d0d3
- SSDEEP 768:rFnM3cnmQucpCGdS/LV2AZwg28elce+TkP/SfYtVujFwDdJ:rFnM3GmQuWCGdS/LV2AZwg28elce+TkX
- TLSH T1A7C2220A05BF5BF30E6291FED2398F90A127BC2A47126E91B592465C3AC18CE4F5F758
- MD5 SHA1 SHA512 SSDEEP TLSH