Vape421Native[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
Vape421Native.dll
Size 23.3MB
Sample260830-3ccgmstygz
SHA256 61785766f9c01d4dc2e0b464488f723a978f4c7b81f9359b22c0218ea1e97240
MD5 cbf9dfde1c733a3e6f7645b5a404bd12
SHA1 dcf009761b384007797f77ec78598838e9a77eb2
SHA512 6eb6da0f30b393a69c5123235d07d78f94ef3a40536ce9e32d92f3a7687887683bda0bacef11ae41fac8ecc85f924fb3eaab3c65545de2bb07a6e1aae05bb3f5
SSDEEP 393216:A+1TQ0iJA2WnuV1ZQbJaGvJqryJE8suMXcGw0hvBLDh0fefBqVHZ:A6T12WCZQbgGv75suMXpwMZ3KesH
TLSH
T1A0371293E8E9643EFABB913763840267BE3E87D8E10780D514B879D258B7C894F5036D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Vape421Native.dll

File Explorer

Vape421Native.dll

.dll 23.3MB

Vape421Native.dll

IMPHASH 1256b379c4cf030de35d20f7a5119d85
SHA256 61785766f9c01d4dc2e0b464488f723a978f4c7b81f9359b22c0218ea1e97240
MD5 cbf9dfde1c733a3e6f7645b5a404bd12
SHA1 dcf009761b384007797f77ec78598838e9a77eb2
SHA512 6eb6da0f30b393a69c5123235d07d78f94ef3a40536ce9e32d92f3a7687887683bda0bacef11ae41fac8ecc85f924fb3eaab3c65545de2bb07a6e1aae05bb3f5
SSDEEP 393216:A+1TQ0iJA2WnuV1ZQbJaGvJqryJE8suMXcGw0hvBLDh0fefBqVHZ:A6T12WCZQbgGv75suMXpwMZ3KesH
TLSH
T1A0371293E8E9643EFABB913763840267BE3E87D8E10780D514B879D258B7C894F5036D
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

30980

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

user32

GetKeyNameTextA GetAsyncKeyState EmptyClipboard SetClipboardData CloseClipboard OpenClipboard IsWindow CallWindowProcW DefWindowProcW PostMessageW PeekMessageW DispatchMessageW GetWindowThreadProcessId GetClassNameW EnumWindows SetWindowLongPtrW ScreenToClient GetCursorPos GetForegroundWindow TranslateMessage MapVirtualKeyA

ws2_32

closesocket htonl htons recv WSACleanup send setsockopt shutdown socket WSAStartup connect

kernel32

UnmapViewOfFile IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GlobalFree GlobalLock GlobalUnlock GlobalAlloc AcquireSRWLockShared ReleaseSRWLockShared GetProcessHeap HeapFree HeapAlloc SetLastError MapViewOfFile OpenFileMappingW OpenEventW SetEvent InitOnceExecuteOnce AcquireSRWLockExclusive ReleaseSRWLockExclusive SetEnvironmentVariableA FindResourceW CreateDirectoryW CreateFileW DeleteFileW FlushFileBuffers WriteFile GetTempPathW OutputDebugStringW CloseHandle GetLastError Sleep GetCurrentProcessId CreateThread GetLocalTime DisableThreadLibraryCalls FreeLibraryAndExitThread GetModuleFileNameW GetModuleHandleW GetModuleHandleExW GetProcAddress LoadResource LockResource SizeofResource

vcruntime140

memchr memcmp memset __C_specific_handler __std_type_info_destroy_list memcpy wcsrchr

api-ms-win-crt-stdio-l1-1-0

_wfopen_s fputws fclose __stdio_common_vsnprintf_s __stdio_common_vsnwprintf_s

api-ms-win-crt-string-l1-1-0

strncmp strcmp strcpy_s strlen wcscmp wcslen

api-ms-win-crt-heap-l1-1-0

calloc free

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _initialize_onexit_table _configure_narrow_argv _cexit _seh_filter_dll _execute_onexit_table _initterm_e _initterm