Vape421Injector[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Vape421Injector.exe
Size 19KB
Sample261027-tae1bavwex
SHA256 6799aa71b48acfc31b786c5247896d6fdfb99d3ed3661282565b94b1898cacc3
MD5 1b9fc6f13ab77364be73fb8b1c9bd083
SHA1 a48c3e7466d459e1d41175d89e27676fd8a078db
SHA512 91605537595628904e4e28fccbc8d30bce159e3e2188427526b32fdaf534f8d78d1250813bdee5bf9464dd3a35a28ccdb054dc20cfc9a6862b589f12aa1fe138
SSDEEP 384:XA/ECKdlD2yMHBax+MeUhWNGHb7trkUPwdfnz7e91Fz:XA/GdlavBk+MeUTJqnk1
TLSH
T168923A457BF524D9E17BE632C832B136E67178165B33868F0358801C0EB2B90AD79F47
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Vape421Injector.exe

File Explorer

Vape421Injector.exe

.exe 19KB

Vape421Injector.exe

IMPHASH 5b1555628e9e584768dddfb3474e9316
SHA256 6799aa71b48acfc31b786c5247896d6fdfb99d3ed3661282565b94b1898cacc3
MD5 1b9fc6f13ab77364be73fb8b1c9bd083
SHA1 a48c3e7466d459e1d41175d89e27676fd8a078db
SHA512 91605537595628904e4e28fccbc8d30bce159e3e2188427526b32fdaf534f8d78d1250813bdee5bf9464dd3a35a28ccdb054dc20cfc9a6862b589f12aa1fe138
SSDEEP 384:XA/ECKdlD2yMHBax+MeUhWNGHb7trkUPwdfnz7e91Fz:XA/GdlavBk+MeUTJqnk1
TLSH
T168923A457BF524D9E17BE632C832B136E67178165B33868F0358801C0EB2B90AD79F47
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8976

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetStdHandle GetFileAttributesW GetFullPathNameW CloseHandle GetLastError WaitForSingleObject Sleep CreateRemoteThread OpenProcess GetTickCount64 VirtualAllocEx WriteProcessMemory VirtualFreeEx IsWow64Process GetModuleFileNameW GetModuleHandleW GetProcAddress LocalFree FormatMessageW FillConsoleOutputCharacterW FillConsoleOutputAttribute GetConsoleCursorInfo SetConsoleCursorInfo GetConsoleScreenBufferInfo SetConsoleCursorPosition CreateToolhelp32Snapshot Process32FirstW Process32NextW Module32FirstW Module32NextW RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent RtlCaptureContext

user32

IsWindowVisible GetWindowTextW GetWindowTextLengthW EnumWindows GetWindowThreadProcessId

vcruntime140

memset memcpy __C_specific_handler __current_exception __current_exception_context wcsrchr

api-ms-win-crt-string-l1-1-0

wcscpy wcslen wcsncpy _wcsicmp

api-ms-win-crt-conio-l1-1-0

_getwch

api-ms-win-crt-stdio-l1-1-0

fflush __p__commode __acrt_iob_func _set_fmode _kbhit __stdio_common_vfwprintf

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-convert-l1-1-0

wcstoul

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback _c_exit _exit _seh_filter_exe exit _initialize_onexit_table _cexit _crt_atexit terminate _set_app_type _initterm_e __p___wargv _initterm _get_initial_wide_environment _configure_wide_argv _register_onexit_function __p___argc _initialize_wide_environment

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode