Vape V4.zip
- SHA256 506f7390d623fe1bd5374c1587e914d78bc70c0bd5d979ef4e30af91391d8992
Static task
static1
1 signatures
General
- Target Vape V4.zip
- Size 23.5MB
- Sample261107-n4ad2aeg49
- SHA256 506f7390d623fe1bd5374c1587e914d78bc70c0bd5d979ef4e30af91391d8992
- MD5 9d774bbf86fc88cf921b7bc4784e77f0
- SHA1 9fdc0bd42299382ec7411879778cd8584e821f48
- SHA512 e3f450dc586293eec63fccf56f293cbac3c71cec386256619a13bfd6d5b0ea3c1e06517d95a9dc8901993050b3e1fdbd72424cec16d33a4bdd66ffb1baa3d304
- SSDEEP 393216:t4ozCB2IqxUsDfwmdosdgj7Lh/uM4TxMKo9yplv9iwWXEWEsrsYp0D+YxvHfNoC:tzuB2IqxUsbXVq5/uM4aK0YiZXm2jiHt
- TLSH T1F747332A1B21944E324D32E225DF63269426DCB376ABDDECE75041BF93842E51B10F9F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Extreme Injector v3.exe unpack001/VapeV4.dll
File Explorer
-
Vape V4.zip.zip 23.5MB
-
Extreme Injector v3.exe.exe 1.9MB
-
VapeV4.dll.dll 23.3MB
Extreme Injector v3.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 b65f40618f584303ca0bcf9b5f88c233cc4237699c0c4bf40ba8facbe8195a46
- MD5 ec801a7d4b72a288ec6c207bb9ff0131
- SHA1 32eec2ae1f9e201516fa7fcdc16c4928f7997561
- SHA512 a07dd5e8241de73ce65ff8d74acef4942b85fc45cf6a7baafd3c0f9d330b08e7412f2023ba667e99b40e732a65e8fb4389f7fe73c7b6256ca71e63afe46cdcac
- SSDEEP 49152:NNEVtO1U1y1DDDDDD7Llngq7NNMqU0p2Vhk9a:NNEVJyZlng4p2V
- TLSH T1B8956D997650B69EC89BC932CAE51C2CF760A07B571BC343A46325EC9D4DA9BCF041B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1955422
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
VapeV4.dll
- IMPHASH 2628d709222f2224fbbfed713eae5df5
- SHA256 10d62c70130b1bd9a7a3f1a7a28d82224a7d764907054e54a33da1fa41792c7d
- MD5 dc668cdf4893f0c8ce04f607d449ebc5
- SHA1 889be08df239db37d67bb7b62f5d5541be5bcdb5
- SHA512 e495546dc01e7a733d5d85f1c65c781993d1f1d3e9c4b095ebc75c9a0bcebfeafe4f5bcc780d67fb69bb4b61d9697a3096f60c305d56b0b0f758248f6c19d814
- SSDEEP 393216:3mOGa87jlznaRNNkbJaGPJqryJU8sOMjAqQETvLftZbLJMBqVHX:3VGjlzeNkbgGP7JsOMjZQqTlJJBH
- TLSH T1E8371293E9E9643EEABB9137228402677E3E87D8E10790E414B875D258BBC8D4F5037D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
29152
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
user32
DispatchMessageW
PeekMessageW
PostMessageW
DefWindowProcW
CallWindowProcW
IsWindow
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
GetAsyncKeyState
GetKeyNameTextA
GetWindowThreadProcessId
GetClassNameW
EnumWindows
SetWindowLongPtrW
ScreenToClient
GetCursorPos
GetForegroundWindow
MapVirtualKeyA
TranslateMessage
ws2_32
connect
htonl
htons
recv
send
closesocket
WSACleanup
WSAStartup
socket
shutdown
setsockopt
kernel32
InitOnceExecuteOnce
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
AcquireSRWLockShared
ReleaseSRWLockShared
GetProcessHeap
HeapFree
HeapAlloc
SetLastError
UnmapViewOfFile
MapViewOfFile
OpenFileMappingW
OpenEventW
SetEvent
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
SetEnvironmentVariableA
FindResourceW
SizeofResource
LockResource
LoadResource
GetProcAddress
GetModuleHandleExW
GetModuleHandleW
GetModuleFileNameW
FreeLibraryAndExitThread
CreateDirectoryW
CreateFileW
DeleteFileW
FlushFileBuffers
WriteFile
GetTempPathW
OutputDebugStringW
CloseHandle
GetLastError
Sleep
GetCurrentProcessId
CreateThread
GetLocalTime
DisableThreadLibraryCalls
vcruntime140
__C_specific_handler
__std_type_info_destroy_list
memset
wcsrchr
memcpy
memchr
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsnwprintf_s
fclose
__stdio_common_vsnprintf_s
fputws
_wfopen_s
api-ms-win-crt-string-l1-1-0
strlen
strncmp
strcpy_s
strcmp
wcslen
api-ms-win-crt-heap-l1-1-0
calloc
free
api-ms-win-crt-runtime-l1-1-0
_cexit
_initterm
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_initterm_e
JNI_OnLoad
JNI_OnUnload
Name
.text
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
23.2MB
Virtual Size
23.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
120B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35721,
count=4, id=259, version=35721,
count=8, id=260, version=35721,
count=12, id=261, version=35721,
count=7, id=257, version=33145,
count=113, id=1, productName=Unmarked objects,
count=3, id=260, version=36256,
count=1, id=256, version=36256,
count=1, id=255, version=36256,
count=1, id=151,
count=1, id=258, version=36256,