Telegram[.]Bot[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Telegram.Bot.dll
Size

184KB
MD5

0d98367d134913a213794c34c8489452
SHA1

b405a4cfee308390e0f03c91a67a42538a543aaa
SHA256

69d026d76562cdb7d96fac272f89f65b08c01d3096f82c1933d40e1ec37d9379
SHA512

3ee51b07f95cff5e2473561a734d6cb61bca1176ae43589783805e9e8dbca5add59dd28ee67cd2ddd348a40d01a3cbac3501fb321e78bb7287adbc8d9266f88e
SSDEEP

3072:1QcHj49NmhXsEeZmOkVIBLJuUOEMMRKd4LJKtElKXl+2PHj:ucHj49NmFQaCVSMMuq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Telegram.Bot.dll

Files

Telegram.Bot.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\telegram-bot\src\Telegram.Bot\obj\Release\net45\Telegram.Bot.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 182KB - Virtual size: 181KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ