C:\Workspace\telegram\tdesktop\out\Release\Telegram.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Telegram20230501_tgcloud_PDS/Telegram.exe
Resource
win11-20240426-en
General
-
Target
Telegram_PC.zip
-
Size
38.3MB
-
MD5
2788d1fdf8be3473976f015c2aba6ba1
-
SHA1
de7977a8569ccb0a574a75a977560982c5e55f53
-
SHA256
3468af1600b5564e8ec4d80aee6519e4b0d2373a18f717429e2f82c07922733b
-
SHA512
77f6365b06672239c68ebf37ca4cdacf25708a597ce2731c814fb250f1dcaf3cc5b84bd1f6b3d0abfb7fb9ecb10b9330839f6cfb745f1fb0aa15834370c9dc5c
-
SSDEEP
786432:LMU8SYtgc7kv0Gh7rEGmOSOOZ+4uuMeME7/2KnuiZ11OFPq:LgSEpkv0GhHEGPSc9aMwnuiZb0i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Telegram20230501_tgcloud_PDS/Telegram.exe
Files
-
Telegram_PC.zip.zip
-
Telegram20230501_tgcloud_PDS/Telegram.exe.exe windows:6 windows x86 arch:x86
1007d470dbe032d0090382efc821ff5c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
DeleteFileW
GetLastError
CopyFileW
QueryPerformanceCounter
QueryPerformanceFrequency
CreateFileW
WriteFile
CloseHandle
GetCommandLineW
LocalFree
RaiseException
EncodePointer
DecodePointer
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
InitOnceExecuteOnce
GetCurrentProcessId
GetEnvironmentVariableW
RemoveDirectoryW
GetModuleFileNameW
WinExec
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesW
GetFileInformationByHandle
GetModuleHandleW
GetModuleHandleExW
GetProcAddress
LoadLibraryW
SetEvent
ResetEvent
WaitForSingleObject
CreateEventW
WaitForMultipleObjects
CreateThread
SetThreadPriority
InitializeSListHead
InterlockedPushEntrySList
InterlockedFlushSList
FreeLibrary
ReleaseSemaphore
CreateSemaphoreW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetSystemTimeAsFileTime
VerSetConditionMask
VerifyVersionInfoW
GetLocaleInfoW
GetUserDefaultUILanguage
GetTickCount
GetTickCount64
FlushFileBuffers
MoveFileExW
FindFirstFileW
LockFile
UnlockFile
PowerCreateRequest
PowerSetRequest
PowerClearRequest
LocalAlloc
FormatMessageW
MultiByteToWideChar
WideCharToMultiByte
FormatMessageA
GetVersionExA
GetCurrentThreadId
WaitForSingleObjectEx
WaitForMultipleObjectsEx
CreateEventExW
GetCurrentThread
IsDebuggerPresent
DebugBreak
CreateSemaphoreA
ReadFile
SetFilePointerEx
GetStdHandle
OutputDebugStringA
Sleep
OpenThread
TlsAlloc
TlsGetValue
TlsSetValue
CreateEventA
SetLastError
QueueUserAPC
GetThreadId
GetModuleHandleA
TryEnterCriticalSection
GetNativeSystemInfo
OpenProcess
QueryFullProcessImageNameW
ProcessIdToSessionId
WTSGetActiveConsoleSessionId
GetModuleHandleExA
ExpandEnvironmentStringsW
GetCurrentProcess
GetVersionExW
lstrcpyW
lstrlenW
lstrcpynW
GetSystemInfo
OutputDebugStringW
LoadLibraryExW
InitializeCriticalSectionEx
WakeConditionVariable
SleepConditionVariableCS
InitializeConditionVariable
WakeAllConditionVariable
InitOnceBeginInitialize
InitOnceComplete
MoveFileExA
InitializeSRWLock
SleepConditionVariableSRW
GetSystemDirectoryW
LoadLibraryExA
ReleaseMutex
GetConsoleMode
WriteConsoleW
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
GetProcessAffinityMask
CreateMutexA
LoadLibraryA
GetTempPathA
GetTempFileNameA
GetEnvironmentVariableA
TlsFree
GetProcessHeap
GetSystemTime
SystemTimeToFileTime
InitializeCriticalSectionAndSpinCount
SwitchToFiber
DeleteFiber
CreateFiber
GetFileType
ConvertFiberToThread
ConvertThreadToFiber
SetConsoleMode
ReadConsoleA
ReadConsoleW
GlobalFree
DisconnectNamedPipe
WaitNamedPipeW
ConnectNamedPipe
CreateNamedPipeW
GetOverlappedResult
SetHandleInformation
GetVolumeInformationW
GetLongPathNameW
GetDriveTypeW
GetConsoleWindow
CompareStringEx
GetLocalTime
TerminateProcess
IsProcessorFeaturePresent
DuplicateHandle
SwitchToThread
GetThreadPriority
TerminateThread
ResumeThread
UnregisterWaitEx
RegisterWaitForSingleObject
ReadFileEx
PeekNamedPipe
CancelIoEx
SleepEx
WriteFileEx
GetDateFormatW
GetTimeFormatW
GetCurrencyFormatW
GetUserDefaultLCID
GetUserPreferredUILanguages
GetStartupInfoW
GetLogicalDrives
SetEndOfFile
SetErrorMode
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
GetFileAttributesExW
GetFullPathNameW
SetFileTime
GetTempPathW
GetVolumePathNamesForVolumeNameW
DeviceIoControl
MoveFileW
TzSpecificLocalTimeToSystemTime
FileTimeToSystemTime
GetFileInformationByHandleEx
GetExitCodeProcess
FindCloseChangeNotification
FindFirstChangeNotificationW
FindNextChangeNotification
GetTimeZoneInformation
GetGeoInfoW
GetUserGeoID
CompareStringW
LCMapStringW
ExitProcess
CreateMutexW
VirtualAlloc
VirtualFree
CreateProcessW
CheckRemoteDebuggerPresent
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalSize
VirtualProtect
VirtualQuery
GetExitCodeThread
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
CreateSemaphoreExW
FlushProcessWriteBuffers
GetCurrentProcessorNumber
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
GetLocaleInfoEx
LCMapStringEx
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InterlockedPopEntrySList
QueryDepthSList
SignalObjectAndWait
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
SetThreadAffinityMask
UnregisterWait
GetThreadTimes
FreeLibraryAndExitThread
CreateTimerQueue
RtlUnwind
ExitThread
SetStdHandle
SystemTimeToTzSpecificLocalTime
SetConsoleCtrlHandler
GetCommandLineA
SetFileAttributesW
GetConsoleOutputCP
IsValidLocale
EnumSystemLocalesW
HeapAlloc
HeapFree
SetEnvironmentVariableW
GetFileSizeEx
HeapReAlloc
HeapSize
HeapQueryInformation
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetUserDefaultLangID
Exports
Exports
??0Animation@rlottie@@AAE@XZ
??0PlatformMethods@angle@@QAE@XZ
??0Surface@rlottie@@QAE@PAIIII@Z
??0Surface@rlottie@@QAE@XZ
??1Animation@rlottie@@QAE@XZ
??4PlatformMethods@angle@@QAEAAU01@$$QAU01@@Z
??4PlatformMethods@angle@@QAEAAU01@ABU01@@Z
??4Surface@rlottie@@QAEAAV01@$$QAV01@@Z
??4Surface@rlottie@@QAEAAV01@ABV01@@Z
?buffer@Surface@rlottie@@QBEPAIXZ
?bytesPerLine@Surface@rlottie@@QBEIXZ
?configureModelCacheSize@@YAXI@Z
?drawRegionHeight@Surface@rlottie@@QBEIXZ
?drawRegionPosX@Surface@rlottie@@QBEIXZ
?drawRegionPosY@Surface@rlottie@@QBEIXZ
?drawRegionWidth@Surface@rlottie@@QBEIXZ
?duration@Animation@rlottie@@QBENXZ
?frameAtPos@Animation@rlottie@@QAEIN@Z
?frameRate@Animation@rlottie@@QBENXZ
?height@Surface@rlottie@@QBEIXZ
?layers@Animation@rlottie@@QBEABV?$vector@V?$tuple@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@HH@std@@V?$allocator@V?$tuple@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@HH@std@@@2@@std@@XZ
?loadFromData@Animation@rlottie@@SA?AV?$unique_ptr@VAnimation@rlottie@@U?$default_delete@VAnimation@rlottie@@@std@@@std@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@ABV54@1_NABV?$vector@U?$pair@II@std@@V?$allocator@U?$pair@II@std@@@2@@4@W4FitzModifier@2@@Z
?loadFromFile@Animation@rlottie@@SA?AV?$unique_ptr@VAnimation@rlottie@@U?$default_delete@VAnimation@rlottie@@@std@@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@_N@Z
?render@Animation@rlottie@@QAE?AV?$future@VSurface@rlottie@@@std@@IVSurface@2@_N@Z
?renderSync@Animation@rlottie@@QAEXIVSurface@2@_N@Z
?renderTree@Animation@rlottie@@QBEPBULOTLayerNode@@III@Z
?setDrawRegion@Surface@rlottie@@QAEXIIII@Z
?setValue@Animation@rlottie@@AAEXUColor_Type@2@W4Property@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@$$QAV?$function@$$A6A?AUColor@rlottie@@ABUFrameInfo@2@@Z@6@@Z
?setValue@Animation@rlottie@@AAEXUColor_Type@2@W4Property@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UColor@2@@Z
?setValue@Animation@rlottie@@AAEXUFloat_Type@2@W4Property@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@$$QAV?$function@$$A6AMABUFrameInfo@rlottie@@@Z@6@@Z
?setValue@Animation@rlottie@@AAEXUFloat_Type@2@W4Property@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@M@Z
?setValue@Animation@rlottie@@AAEXUPoint_Type@2@W4Property@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@$$QAV?$function@$$A6A?AUPoint@rlottie@@ABUFrameInfo@2@@Z@6@@Z
?setValue@Animation@rlottie@@AAEXUPoint_Type@2@W4Property@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UPoint@2@@Z
?setValue@Animation@rlottie@@AAEXUSize_Type@2@W4Property@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@$$QAV?$function@$$A6A?AUSize@rlottie@@ABUFrameInfo@2@@Z@6@@Z
?setValue@Animation@rlottie@@AAEXUSize_Type@2@W4Property@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@USize@2@@Z
?size@Animation@rlottie@@QBEXAAI0@Z
?totalFrame@Animation@rlottie@@QBEIXZ
?width@Surface@rlottie@@QBEIXZ
_ANGLEGetDisplayPlatform@20
_ANGLEResetDisplayPlatform@4
Sections
.text Size: 49.5MB - Virtual size: 49.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rodata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23.4MB - Virtual size: 23.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25.5MB - Virtual size: 28.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rodata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qtmetad Size: 1024B - Virtual size: 615B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qtmimed Size: 315KB - Virtual size: 315KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ