VapeInjector[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
VapeInjector.exe
Size 22.2MB
Sample260828-e7dfestbkb
SHA256 08ad80885743b3c78de6d6f14ffa5c22a433324c443e765c1e16046033a59da0
MD5 d176f42990a4bda0bb5bf1381db8a633
SHA1 39f229f8bce79766127c21e0cc0b6deefa070329
SHA512 a1b80e2d8bb46d78bb2eb4847ec538dea41d2ea2ecfd77dddfa496b70512fa0a189116761f74562157baa209a20f4f2e94b52da69a32f2c2f2fb0240730035b0
SSDEEP 393216:IrFVi9jKFnTvlSCJaGz8sJMKOsZBqygVxcYowjFAHTf:IrFVSKFpSCgGYsJMKOsnVc5ozHD
TLSH
T1A5371283FED9C83AEA97913A11CAC237B92C9AD8D50791D701B8C5960872CC94B17FDD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
VapeInjector.exe

File Explorer

VapeInjector.exe

.exe 22.2MB

VapeInjector.exe

IMPHASH 6bbfbdecb99779151b20647d1cc5ccfe
SHA256 08ad80885743b3c78de6d6f14ffa5c22a433324c443e765c1e16046033a59da0
MD5 d176f42990a4bda0bb5bf1381db8a633
SHA1 39f229f8bce79766127c21e0cc0b6deefa070329
SHA512 a1b80e2d8bb46d78bb2eb4847ec538dea41d2ea2ecfd77dddfa496b70512fa0a189116761f74562157baa209a20f4f2e94b52da69a32f2c2f2fb0240730035b0
SSDEEP 393216:IrFVi9jKFnTvlSCJaGz8sJMKOsZBqygVxcYowjFAHTf:IrFVSKFpSCgGYsJMKOsnVc5ozHD
TLSH
T1A5371283FED9C83AEA97913A11CAC237B92C9AD8D50791D701B8C5960872CC94B17FDD
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

80:a5:20:01:2d:12:23:e9:e3:02:70:9d:66:ff:73:1b:94:48:3a:dc:61:ba:b8:b9:6c:09:c1:e7:5f:1a:0f:f9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Trosa

Chains

Aug 26, 2026

CN=Trosa

Minor OS version

Major OS version

Entry point

5152

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken

gdi32

BitBlt CreateCompatibleBitmap CreateCompatibleDC DeleteDC DeleteObject SelectObject

gdiplus

GdipAddPathArc GdipAlloc GdipCloneBrush GdipCloneFontFamily GdipCloneImage GdipClosePathFigure GdipCreateFont GdipCreateFromHDC GdipCreateImageAttributes GdipCreatePath GdipCreatePen1 GdipCreateSolidFill GdipCreateStringFormat GdipDeleteBrush GdipDeleteFont GdipDeleteFontFamily GdipDeleteGraphics GdipDeletePath GdipDeletePen GdipDeletePrivateFontCollection GdipDeleteStringFormat GdipDisposeImage GdipDisposeImageAttributes GdipDrawImageRect GdipDrawImageRectRect GdipDrawPath GdipDrawString GdipFillPath GdipFillRectangle GdipFree GdipGetFamilyName GdipGetFontCollectionFamilyList GdipGetGenericFontFamilySansSerif GdipLoadImageFromStream GdipNewPrivateFontCollection GdipPrivateAddMemoryFont GdipScaleWorldTransform GdipSetImageAttributesColorMatrix GdipSetInterpolationMode GdipSetSmoothingMode GdipSetStringFormatAlign GdipSetStringFormatFlags GdipSetStringFormatLineAlign GdipSetTextRenderingHint GdiplusShutdown GdiplusStartup

kernel32

CloseHandle CreateDirectoryW CreateEventA CreateFileW CreateRemoteThread CreateToolhelp32Snapshot DeleteCriticalSection EnterCriticalSection FindResourceW FormatMessageA GetCPInfo GetCurrentProcess GetCurrentThreadId GetExitCodeThread GetFileAttributesExW GetFileAttributesW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetProcAddress GetStartupInfoW GetSystemTimeAsFileTime GetTempPathW GetTickCount GetTimeZoneInformation GlobalAlloc GlobalFree GlobalLock GlobalUnlock InitializeCriticalSection LeaveCriticalSection LoadLibraryW LoadResource LocalFree LockResource MulDiv MultiByteToWideChar OpenProcess Process32FirstW Process32NextW QueryPerformanceCounter QueryPerformanceFrequency RaiseException RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetEvent SetUnhandledExceptionFilter SizeofResource Sleep TlsGetValue VirtualAllocEx VirtualFreeEx VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte WriteFile WriteProcessMemory

msvcrt

__C_specific_handler ___lc_codepage_func ___mb_cur_max_func __iob_func __set_app_type __setusermatherr __wgetmainargs __winitenv _amsg_exit _cexit _commode _errno _fmode _initterm _wcmdln _wcsicmp abort atexit calloc exit fflush fprintf fputc fputs free fwrite getenv localeconv malloc memchr memcmp memcpy memmove memset realloc setvbuf signal strchr strcmp strerror strlen strncmp strtoul vfprintf wcslen _read

shlwapi

SHCreateMemStream

user32

BeginPaint CloseClipboard CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW EmptyClipboard EndPaint EnumWindows GetClientRect GetDpiForSystem GetMessageW GetWindowLongPtrW GetWindowTextLengthW GetWindowTextW GetWindowThreadProcessId InvalidateRect IsWindowVisible KillTimer LoadCursorW LoadIconW OpenClipboard PostQuitMessage RegisterClassExW SetClipboardData SetFocus SetTimer SetWindowLongPtrW SetWindowPos ShowWindow SystemParametersInfoW TrackMouseEvent TranslateMessage UpdateWindow

Name

.text

Size

203KB

Virtual Size

202KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

560B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

21.5MB

Virtual Size

21.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

1024B

Virtual Size

744B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

512B

Virtual Size

153B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/81

Size

512B

Virtual Size

468B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/97

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

VapeInjector.exe

PE Signature issue

advapi32

gdi32

gdiplus

kernel32

msvcrt

shlwapi

user32

generic