TrackCord Grabber.rar
- SHA256 3b21928cea482c74ce6315cde04538998b42534a4602ad690cc076fa32fd101b
Behavioral task
behavioral1
Sample
TrackCord Grabber/TrackCord Grabber/INSTALLER.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
900 seconds
Behavioral task
behavioral2
Sample
TrackCord Grabber/TrackCord Grabber/PYTHONSETUP.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
5 signatures
900 seconds
Behavioral task
behavioral3
Sample
TrackCord Grabber/TrackCord Grabber/Setup Grabber.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
5 signatures
900 seconds
Behavioral task
behavioral4
Sample
TrackCord Grabber/TrackCord Grabber/TrackOrd_TokenGrabber-Reborn.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
18 signatures
900 seconds
General
- Target TrackCord Grabber.rar
- Size 51.2MB
- Sample261029-w74faad15t
- SHA256 3b21928cea482c74ce6315cde04538998b42534a4602ad690cc076fa32fd101b
- MD5 394fdc719b113ad9abfa53d5d19d39d5
- SHA1 18b29853afed001c72fba8128d14f2e8b8804fbc
- SHA512 a0c548e482075a89ec63fad6c4151e6daad8a6e8bd649667d31eddbcf12bbbf00ae7dda30805bd1f184dfb767db18b928f04b8df911bc08d2ef1a96aac51bb25
- SSDEEP 1572864:C+qhBOxVgnGWeK7fvn3QhGCQ8jFVLDTVdxW:C++6gnfz6GCfjFVJfW
- TLSH T129C733CEF406B0782FA3FCCD0F2A425DBD41A951DAAA2BC5196885DD16018CCDFD9B72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Detects Pyinstaller 2 IoCs
resource yara_rule static1/unpack001/TrackCord Grabber/TrackCord Grabber/Setup Grabber.exe pyinstaller static1/unpack001/TrackCord Grabber/TrackCord Grabber/TrackOrd_TokenGrabber-Reborn.exe pyinstaller - Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/TrackCord Grabber/TrackCord Grabber/Setup Grabber.exe unpack001/TrackCord Grabber/TrackCord Grabber/TrackOrd_TokenGrabber-Reborn.exe
File Explorer
-
TrackCord Grabber.rar.rar 51.2MB
-
TrackCord Grabber/TrackCord Grabber/INSTALLER.bat327B
-
TrackCord Grabber/TrackCord Grabber/PYTHONSETUP.exe.exe 24.0MB
-
TrackCord Grabber/TrackCord Grabber/Setup Grabber.exe.exe 10.8MB
-
MQWIEZR.pyc22KB
-
TrackCord Grabber/TrackCord Grabber/TUTORIAL.txt255B
-
TrackCord Grabber/TrackCord Grabber/TrackOrd_TokenGrabber-Reborn.exe.exe 17.3MB
-
TrackOrd_TokenGrabber-Reborn-obf.pyc39KB
-
TrackCord Grabber/TrackCord Grabber/Updates/Update#1.txt141B
TrackCord Grabber/TrackCord Grabber/INSTALLER.bat
- SHA256 8d7ac081b1e1fac0714e6c9236ae90d9cd118664f66f501e4922b14548a1e15a
- MD5 02f4545ffb34c56ec516c25863f61190
- SHA1 200cac5759cfcd7c05dc364caa53152b67b4c76a
- SHA512 5f1d31638cb75cf5acae86719bc33033c8a452d7fc7cd41d17203c9dc7eeade4549f7e90128a8ac90032f603f618e22a7557708bca4daa172ce92021c12ac123
- TLSH T1FFE0263A3922A42C99E0CFE24AB713A23E90A04353214D92218B90B8854B5A3339B96D
- MD5 SHA1 SHA512 TLSH
TrackCord Grabber/TrackCord Grabber/PYTHONSETUP.exe
- IMPHASH f57d7a40ebfca87e6f8082251d937ed8
- SHA256 b5884fa3f05f88bbb617d08584930770c00bbcf675f2865a9161c2358829b605
- MD5 4fe11b2b0bb0c744cf74aff537f7cd7f
- SHA1 b4f5627009f897d3ce9664242e7f7968b55759f1
- SHA512 80f535f7bc5a3d0a7d645c432ec8fdc86474e129d318c474bec043b568d969e989f2d1d3cde955d4316405e2dcce74aa07adc4734756cb833495910f443c3a13
- SSDEEP 393216:eDU6aubdmT1K7iJC6b+dm9kgTWrB3ldBVO9dJiNQbaWd6LwnCtYr6ICEy6uafw:eDUCY1I6KI9kgTiPdjWaypdwxc9Nyyfw
- TLSH T19B47333350989036E6E52972B564D170BE2CEA142B2589EAF2C8FF363D714D56BF3312
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
4c:d9:9a:35:3b:84:6b:6c:e2:68:c1:65:f7:9d:38:9d:01:78:b3:2d:eb:b9:86:83:fe:d8:77:c9:0f:d3:38:b5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
Chains
Oct 24, 2022
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
Serial Number
07:1f:14:1b:8b:30:0d:25:f3:14:eb:23:0c:d0:d1:dd
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 17, 2022 - Jan 15, 2025
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 21, 2022 - Nov 21, 2033
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
188546
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
C:\agent\_work\138\s\build\ship\x86\burn.pdb
advapi32
RegCloseKey
RegOpenKeyExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
InitiateSystemShutdownExW
GetUserNameW
RegQueryValueExW
RegDeleteValueW
CloseEventLog
OpenEventLogW
ReportEventW
ConvertStringSecurityDescriptorToSecurityDescriptorW
CreateWellKnownSid
InitializeAcl
DecryptFileW
SetEntriesInAclW
ChangeServiceConfigW
CloseServiceHandle
ControlService
OpenSCManagerW
OpenServiceW
QueryServiceStatus
SetNamedSecurityInfoW
CheckTokenMembership
AllocateAndInitializeSid
SetEntriesInAclA
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
GetTokenInformation
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
QueryServiceConfigW
user32
PeekMessageW
PostMessageW
IsWindow
WaitForInputIdle
PostQuitMessage
GetMessageW
TranslateMessage
MsgWaitForMultipleObjects
PostThreadMessageW
GetMonitorInfoW
MonitorFromPoint
IsDialogMessageW
LoadCursorW
LoadBitmapW
SetWindowLongW
GetWindowLongW
GetCursorPos
MessageBoxW
CreateWindowExW
UnregisterClassW
RegisterClassW
DefWindowProcW
DispatchMessageW
oleaut32
VariantInit
SysAllocString
VariantClear
SysFreeString
gdi32
DeleteDC
DeleteObject
SelectObject
StretchBlt
GetObjectW
CreateCompatibleDC
shell32
CommandLineToArgvW
SHGetFolderPathW
ShellExecuteExW
ole32
CoUninitialize
CoInitializeEx
CoInitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoInitializeSecurity
CLSIDFromProgID
kernel32
GetCPInfo
GetOEMCP
GetACP
CreateFileW
CloseHandle
GetLastError
HeapSetInformation
GetModuleHandleW
GetProcAddress
LocalFree
FormatMessageW
lstrlenA
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
ExpandEnvironmentStringsW
CreateDirectoryW
GetFullPathNameW
GetTempFileNameW
GetTempPathW
Sleep
GetLocalTime
GetModuleFileNameW
CompareStringW
CreateFileA
SetFilePointer
WriteFile
GetCurrentProcessId
GetSystemDirectoryW
LoadLibraryW
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetCommandLineA
SetCurrentDirectoryW
GetCurrentDirectoryW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
RemoveDirectoryW
SetFileAttributesW
MoveFileExW
InitializeCriticalSection
DeleteCriticalSection
ReleaseMutex
GetCurrentProcess
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateProcessW
GetVersionExW
VerSetConditionMask
GetVolumePathNameW
EnterCriticalSection
LeaveCriticalSection
GetSystemTime
GetWindowsDirectoryW
GetNativeSystemInfo
GetCommandLineW
FreeLibrary
GetModuleHandleExW
GetComputerNameW
VerifyVersionInfoW
GetDateFormatW
GetUserDefaultUILanguage
GetUserDefaultLangID
GetSystemDefaultLangID
GetStringTypeW
ReadFile
SetFilePointerEx
DuplicateHandle
LoadLibraryExW
CreateEventW
ProcessIdToSessionId
ConnectNamedPipe
SetNamedPipeHandleState
CreateNamedPipeW
WaitForSingleObject
GetProcessId
OpenProcess
CreateThread
GetExitCodeThread
SetEvent
WaitForMultipleObjects
LocalFileTimeToFileTime
SetEndOfFile
SetFileTime
ResetEvent
DosDateTimeToFileTime
CompareStringA
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
CreateMutexW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetThreadLocale
IsValidCodePage
FindFirstFileExW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileSizeEx
FlushFileBuffers
GetConsoleCP
GetConsoleMode
DecodePointer
WriteConsoleW
GetModuleHandleA
GlobalAlloc
GlobalFree
CopyFileW
VirtualAlloc
VirtualFree
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
GetTimeZoneInformation
GetSystemInfo
VirtualProtect
VirtualQuery
GetSystemWow64DirectoryW
GetProcessHeap
GetFileType
ExitProcess
GetStdHandle
InitializeCriticalSectionAndSpinCount
SetLastError
RtlUnwind
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
LoadLibraryExA
rpcrt4
UuidCreate
Name
.text
Size
295KB
Virtual Size
294KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
125KB
Virtual Size
124KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.wixburn
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
89KB
Virtual Size
89KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=26213,
count=143, id=261, version=26213,
count=19, id=260, version=26706,
count=19, id=259, version=26706,
count=43, id=261, version=26706,
count=21, id=260, version=26213,
count=2, id=262, version=26213,
count=17, id=257, version=26213,
count=334, id=1, productName=Unmarked objects,
count=75, id=261, version=27045,
count=1, id=255, version=27045,
count=2, id=151,
count=1, id=258, version=27045,
TrackCord Grabber/TrackCord Grabber/Setup Grabber.exe
- IMPHASH 1dcd477cce07724ec6b817b3be71540e
- SHA256 03f7986da7b9aeb56e0765bb06163aba356caa0d45fe259247c739c5ab06747f
- MD5 a7bc40d07a99c1e0732216b8f62eb882
- SHA1 86d2ed787ca709b2c531038529e662dd82d05aab
- SHA512 3c297f65f7797e7ea499675f969ab49a975d6033f2680f5395ce8d0eff3b01b8bccd6f9be5a5f4a0ad463f0e5392415a1361309ba6d3e8d29bfa794af346a837
- SSDEEP 196608:Ca85DbJrteoY3pOUpKMZAYZIvf7DfyGR21X5Sp6GemDMPwMpRA+xWhpnPG/26IJd:785vzJY3p1pRrIvf7DfDspfaMPdpRkp6
- TLSH T17DB63355E2A11BFAD4F7A23A89C685443B23B83307A8DDDF43A043665F277D0693DE21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Pyinstaller
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
58128
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
CreateWindowExW
ShutdownBlockReasonCreate
MsgWaitForMultipleObjects
ShowWindow
DestroyWindow
RegisterClassW
DefWindowProcW
PeekMessageW
DispatchMessageW
TranslateMessage
GetMonitorInfoW
MonitorFromPoint
GetCursorPos
GetSystemMetrics
PostMessageW
GetMessageW
MessageBoxW
MessageBoxA
SystemParametersInfoW
DestroyIcon
SetWindowLongPtrW
GetWindowLongPtrW
GetClientRect
InvalidateRect
ReleaseDC
GetDC
DrawTextW
GetDialogBaseUnits
EndDialog
DialogBoxIndirectParamW
MoveWindow
SendMessageW
comctl32
ord380
kernel32
GetACP
IsValidCodePage
GetStringTypeW
GetFileAttributesExW
SetEnvironmentVariableW
FlushFileBuffers
LCMapStringW
CompareStringW
VirtualProtect
GetCurrentDirectoryW
HeapAlloc
GetFileSizeEx
GetConsoleOutputCP
GetOEMCP
GetCPInfo
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryExW
GetModuleHandleW
MulDiv
FormatMessageW
CloseHandle
GetCurrentProcess
QueryFullProcessImageNameW
GetEnvironmentStringsW
CreateSymbolicLinkW
SetErrorMode
GetCurrentProcessId
OpenProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
CreateDirectoryW
GetCommandLineW
GetEnvironmentVariableW
ExpandEnvironmentStringsW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetDriveTypeW
RemoveDirectoryW
GetTempPathW
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
Sleep
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
LocalFree
SetConsoleCtrlHandler
K32EnumProcessModules
K32GetModuleFileNameExW
CreateFileW
FindFirstFileExW
MultiByteToWideChar
WideCharToMultiByte
SetFilePointerEx
FreeEnvironmentStringsW
GetProcessHeap
GetTimeZoneInformation
HeapSize
HeapReAlloc
WriteConsoleW
SetEndOfFile
SetDllDirectoryW
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
RtlUnwindEx
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
RtlLookupFunctionEntry
EncodePointer
RaiseException
RtlPcToFileHeader
GetCommandLineA
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ReadFile
GetFullPathNameW
SetStdHandle
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
IsProcessorFeaturePresent
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
HeapFree
GetConsoleMode
ReadConsoleW
advapi32
ConvertSidToStringSidW
OpenProcessToken
GetTokenInformation
ConvertStringSecurityDescriptorToSecurityDescriptorW
gdi32
SelectObject
DeleteObject
CreateFontIndirectW
Name
.text
Size
178KB
Virtual Size
178KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
81KB
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=183, id=261, version=33145,
count=12, id=260, version=33145,
count=11, id=259, version=33145,
count=3, id=253, version=35721,
count=9, id=259, version=35721,
count=17, id=260, version=35721,
count=39, id=261, version=35721,
count=11, id=257, version=33145,
count=163, id=1, productName=Unmarked objects,
count=30, id=260, version=36246,
count=1, id=258, version=36246,
MQWIEZR.pyc
- SHA256 9d971bbee1ca53a5696ddd7bce16f11e4c14b567fecafde49a90bf22810eec7f
- MD5 dc316fa27962bf4542c3052be9f078ad
- SHA1 204527b9f2b79b468c5088c962327717dd71a0f1
- SHA512 51d04588504382da54d77f2a5490eeb1c395a497bd7d6fa7c21aaed9b4614ae138974ce46066899fe559a7cdba4528bbbb93ac5a773c773dd2203fc0bc9f1e54
- SSDEEP 384:kpzc//OKbph/9m9bryFboQVjrMrH5qbjpuImKe4rr:kF4dp3m9brSboQBMrZqLl
- TLSH T1C5A207912B87C17FF48897788842555F73F688F4FA11CB5372AEC029AE893253D664EC
- MD5 SHA1 SHA512 SSDEEP TLSH
TrackCord Grabber/TrackCord Grabber/TUTORIAL.txt
- SHA256 fa2da4512cfe23477ba9f55ed461996943974692082f8a8c310e2c7fd690d1c4
- MD5 025f2bd2d3a5344160eae1538ebf41ab
- SHA1 a052359e7cae8e93314ed7393922f0a9e7a53438
- SHA512 d247c58637f64ba158d4fd1b3a624ed7a3235342e2a30fcc2809ae1c14785c8a95a2b60ac10963ccc54ac6d88770a51fc4c2104b4f747736b70bee24ebf65616
- TLSH T183D0973FE20F027B28304166564E22391B035E0F18642EF6228CE9C833B6330D52330B
- MD5 SHA1 SHA512 TLSH
TrackCord Grabber/TrackCord Grabber/TrackOrd_TokenGrabber-Reborn.exe
- IMPHASH 351592d5ead6df0859b0cc0056827c95
- SHA256 7e25c20c311ca1c0d30ca334e971d0e31563593f7b4db5128a837ea72d0e6e7d
- MD5 6f285a7f9301f8a3e1b649bdb64e34bd
- SHA1 e0fb5a5148ef07b10777b51b6d923d519aea0b47
- SHA512 6717a95996c34bc5d6a4c6ef744da47952453506268f73e1d402d6a20a7e2b8961197dc21271502b73feecf5eda88f46f92f3ac00971e71c5749d310ea518915
- SSDEEP 393216:QOKPvzSvoWpYFxVHFFjXMCHWUjscuIM/PA2w4x/3XvspGEYdEDV83:ZKPvzvGYFrHFFjXMb858/xxX0tDK3
- TLSH T1DD07331DA3E041DBE9F25838B6F7C692DA7AF8B20772C6CFCB6462512E130D0493D956
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Pyinstaller
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
54432
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
TranslateMessage
ShutdownBlockReasonCreate
GetWindowThreadProcessId
SetWindowLongPtrW
GetWindowLongPtrW
MsgWaitForMultipleObjects
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassW
DefWindowProcW
PeekMessageW
DispatchMessageW
GetMessageW
kernel32
GetTimeZoneInformation
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetStringTypeW
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryExW
FormatMessageW
GetModuleFileNameW
SetDllDirectoryW
CreateSymbolicLinkW
SetErrorMode
CreateDirectoryW
GetCommandLineW
GetEnvironmentVariableW
ExpandEnvironmentStringsW
DeleteFileW
FindClose
HeapSize
FindNextFileW
GetDriveTypeW
RemoveDirectoryW
GetTempPathW
CloseHandle
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
Sleep
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
LocalFree
SetConsoleCtrlHandler
GetConsoleWindow
K32EnumProcessModules
K32GetModuleFileNameExW
CreateFileW
FindFirstFileExW
GetFinalPathNameByHandleW
MultiByteToWideChar
WideCharToMultiByte
GetFileAttributesExW
HeapReAlloc
WriteConsoleW
SetEndOfFile
FindFirstFileW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
RtlPcToFileHeader
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ReadFile
GetFullPathNameW
SetStdHandle
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
GetCommandLineA
HeapFree
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
GetCurrentDirectoryW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
VirtualProtect
CompareStringW
LCMapStringW
FlushFileBuffers
SetEnvironmentVariableW
advapi32
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
Name
.text
Size
182KB
Virtual Size
182KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
78KB
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
146KB
Virtual Size
145KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=182, id=261, version=33145,
count=12, id=260, version=33145,
count=11, id=259, version=33145,
count=3, id=253, version=35207,
count=9, id=259, version=35207,
count=17, id=260, version=35207,
count=40, id=261, version=35207,
count=7, id=257, version=33145,
count=141, id=1, productName=Unmarked objects,
count=27, id=260, version=35222,
count=1, id=258, version=35222,
TrackOrd_TokenGrabber-Reborn-obf.pyc
- SHA256 b57f86500da1ecce44bdd8d05bb479866fbd89b4e9b587db4eada7878fa89398
- MD5 b7b859c3140f63b4b0366c868f6165dd
- SHA1 887b389d19d9ba6c425f73aa9c9aa6f7292d525d
- SHA512 8aa7be04006b6029e457798a36c5a10aee56ed4cf79f3fbc72f71f517832312c6f8e11a55cd501fc3ff1bd69f615865080b20ba3556b8d5073f49a104707b0d5
- SSDEEP 768:Eks8l3DAOlcvBb0Rk51URuHhvSUDd9td91B6nDM8AS/SpzoOaD9k4o:b7lcviRkvUR6vSCn9enD6iSpzoOaDGT
- TLSH T15203F170AA0EEFABE7382B318873A1987FC4DA11601887F1367A53F21CA575B257640C
- MD5 SHA1 SHA512 SSDEEP TLSH
TrackCord Grabber/TrackCord Grabber/Updates/Update#1.txt
- SHA256 95dbb62642132a8c524f6426262544a2648613a076dd2e0ac969ce27bbb5afdb
- MD5 624007fae9eab3b751433eb924349a4c
- SHA1 9eb59150f502a2448b6cbe17da1ad5ce4d1fcad5
- SHA512 8c2d3ab50ba8adb58fe6a28ebe2885c9fc7d3a7ecfbce3fc006e1e84e47194274a9f9c30225e2559973b55360d6529db994e936cd12f5adfdded552d57a73af2
- TLSH T1E7C02B068A35F23000F6F041159848BDB72F490A4FF040D03025B37E77200CC008CDBC
- MD5 SHA1 SHA512 TLSH