Overview

overview

8

Static

static

3

TEKLauncher.exe

windows10-2004-x64

8

TEKLauncher.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    TEKLauncher.exe
  • Size 2.5MB
  • Sample260718-vmcw6agv2n
  • SHA256 dd50c7652d50626aedbc8c03657a95a878f79efb2ad40510bf96e43cc4bf4597
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • TEKLauncher.exe
    .exe 2.5MB

TEKLauncher.exe

  • IMPHASH 53e4e12437621212a425d294842d0a96
  • SHA256 dd50c7652d50626aedbc8c03657a95a878f79efb2ad40510bf96e43cc4bf4597
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:6windowsx64arch:x64

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
fc:d4:de:78:e8:69:41:34:80:05:54:13:c0:31:71:9e:c8:e8:9c:4e:88:cc:1b:a0:6d:6c:bf:f3:4a:a3:a0:67:2f:ac:c8:58:81:54:20:12:41:03:53:43:16:47:44:e6
Digest Algorithm
sha384
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Nuclearist,O=TEKnology Hub,C=RU
Minor OS version
0
Major OS version
6
Entry point
80800
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb