quick_telegram_sender[.]exe | Triage

Resubmissions

10-04-2024 02:22

240410-ctrd1sfc4s 7

10-04-2024 02:22

240410-ctq39afc31 7

10-04-2024 02:22

240410-ctpv7abh78 7

10-04-2024 02:22

240410-ctnywsbh76 7

13-05-2023 09:04

230513-k1k5ksfh55 7

Sharing

General

Target

quick_telegram_sender.exe
Size

418KB
MD5

0010d6181a1834c89562503bb2b30924
SHA1

a9a3b1422ba13b36756c1ec5725402beb703047a
SHA256

0fa222fb1c108d47b8d3e7c54753774d5f5098b462c5231a64031a574509a6f3
SHA512

99c682d478ba735eb8bd070877863a188ff2be5448b6806be15c0b1d6c9fe15d0ab40c53387d658a0d02a63e982a664f2788f00ee355dc3653c1fc499184cbf1
SSDEEP

6144:1QwbzMWa3UnvU6dJm/tB9+nNm1GTeh9bU9H/DNA460Jyx0c:exUc6d0v9mNTTe09fRA/0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
quick_telegram_sender.exe

Files

quick_telegram_sender.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 415KB - Virtual size: 415KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ