TEK Launcher[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TEK Launcher.exe
Size

2.9MB
MD5

fedfc84c03b33a1812a5d9ae5fc194fb
SHA1

0b214af3bfeeb6fcfbb1712309e712a514a393ff
SHA256

914c46f52949ba93e5be1232734f3c16a0567674e16574fac7fd245a3473e5c3
SHA512

ecba328c0b9fb138ff65af6c93aad6828b022f9c0d117f5be4bc3ea99373c3a787e1e7ab01269162a9afb5615668e2b0555acd05cb9fcf9c3715974904d86bf8
SSDEEP

49152:I0zN1RER9aCOMbDbujGkONQ4YHShmMWtF4h5EqkB5BimTcy8yxRJxAHBHCYZxCnw:9zlERESDajGxxh2tFKyximTTzGHBHCYd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TEK Launcher.exe

Files

TEK Launcher.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Nuclearist\VS Projects\TEKLauncher\Intermediate\TEKLauncher.pdb

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ