Static task
static1
Behavioral task
behavioral1
Sample
Telegram вир.exe
Resource
win10-20230220-en
General
-
Target
Telegram вир.exe
-
Size
42KB
-
MD5
fa5581d5528572508e5c007ab30a3aa7
-
SHA1
22a6ef48192b2a3e91814b03075b7a18eea14743
-
SHA256
25366db749b1e3f92ac3bfa2c94c4893c6f7a1b46379c1cb9d9e60d5fd3012c9
-
SHA512
bcc373dd468990b33921925cf64edfaaff054aff26d3f6a798389e5df413dc954fc79bcf4536888082a6958a73f0af0a44d9e84ddd40ef1180f7aa43d22bc756
-
SSDEEP
768:Fve/dDS5PmxxxxxixXRylUpK9jg+HLr6GbOsKpeQi9c/KYP3hrv:FG/dDu3R6Uk9jg+rr6GbOsKpeQiQKW
Malware Config
Signatures
Files
-
Telegram вир.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
;v���� Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
d⢮[�� Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE