TelegramInstaller[.]exe

resource
TelegramInstaller.exe

TelegramInstaller.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 6d477b08a0b9c1e8db4ecb921d07b124973f5213639d88fff7df5146adcefc79
MD5 cd1cdcb36708a50c8f7881f86a1f4975
SHA1 f7d97e384824de8e34f58f4adc982faed636c65f
SHA512 16f75074b2187d3842b964301a306130195e39af1ffd45ea7e425f991873a0145ab944a0fe686832f9ae58525ac6b4110992bda80d955c3e2d38354aa2db806c
SSDEEP 12288:6EVD9Afki//axeujDwR0Xb86kxChx40SSR0o6y2/H:fVRAfk6GvDwR0bJkxChx40SSR0o6y2v
TLSH
T19635A2D8AD8DCDC2FAF2B5F09C05CA6147A52C55A88CC1880AF9797B41756E3EC160BF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

f4:9b:da:fe:81:6c:75:fc:69:05:89:b3:11:85:c2:cc:64:a0:31:73:60:c1:d8:73:e5:68:bc:bb:7b:1e:74:a8

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

SERIALNUMBER=HRA 722586,CN=Avira Operations GmbH & Co. KG,OU=Cloud\, Services and Infrastructure,O=Avira Operations GmbH & Co. KG,STREET=Kaplaneiweg 1,L=Tettnang,ST=Baden-Wuerttemberg,C=DE,1.2.840.113549.1.9.1=#0c0c63614061766972612e636f6d,1.3.6.1.4.1.311.60.2.1.1=#1303556c6d,1.3.6.1.4.1.311.60.2.1.2=#1312426164656e2d577565727474656d62657267,1.3.6.1.4.1.311.60.2.1.3=#13024445,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jun 26, 2020

SERIALNUMBER=HRA 722586,CN=Avira Operations GmbH & Co. KG,OU=Cloud\, Services and Infrastructure,O=Avira Operations GmbH & Co. KG,STREET=Kaplaneiweg 1,L=Tettnang,ST=Baden-Wuerttemberg,C=DE,1.2.840.113549.1.9.1=#0c0c63614061766972612e636f6d,1.3.6.1.4.1.311.60.2.1.1=#1303556c6d,1.3.6.1.4.1.311.60.2.1.2=#1312426164656e2d577565727474656d62657267,1.3.6.1.4.1.311.60.2.1.3=#13024445,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=HRA 722586,CN=Avira Operations GmbH & Co. KG,OU=Cloud\, Services and Infrastructure,O=Avira Operations GmbH & Co. KG,STREET=Kaplaneiweg 1,L=Tettnang,ST=Baden-Wuerttemberg,C=DE,1.2.840.113549.1.9.1=#0c0c63614061766972612e636f6d,1.3.6.1.4.1.311.60.2.1.1=#1303556c6d,1.3.6.1.4.1.311.60.2.1.2=#1312426164656e2d577565727474656d62657267,1.3.6.1.4.1.311.60.2.1.3=#13024445,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

PE Signature issue

Digest

fd:8f:62:6f:c4:13:45:b1:8a:a0:0d:2e:95:c4:c8:36:6f:8f:27:7c

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Avira Operations GmbH & Co. KG,O=Avira Operations GmbH & Co. KG,L=Tettnang,C=DE

Chains

Jun 26, 2020

CN=Avira Operations GmbH & Co. KG,O=Avira Operations GmbH & Co. KG,L=Tettnang,C=DE

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:2f:4e:e1:52:d7

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 13, 2011 - Jan 28, 2028

Subject

CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

Serial Number

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 24, 2016 - Jun 24, 2027

Subject

CN=Avira Operations GmbH & Co. KG,O=Avira Operations GmbH & Co. KG,L=Tettnang,C=DE

Serial Number

05:37:f2:5a:88:e2:4c:af:dd:79:19:fa:30:1e:81:46

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 16, 2019 - Nov 16, 2021

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Serial Number

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Revocation Status

Not revoked

Timespan

Jun 15, 2016 - Jun 15, 2024

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

61:29:15:27:00:00:00:00:00:2a

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

SERIALNUMBER=HRA 722586,CN=Avira Operations GmbH & Co. KG,OU=Cloud\, Services and Infrastructure,O=Avira Operations GmbH & Co. KG,STREET=Kaplaneiweg 1,L=Tettnang,ST=Baden-Wuerttemberg,C=DE,1.2.840.113549.1.9.1=#0c0c63614061766972612e636f6d,1.3.6.1.4.1.311.60.2.1.1=#1303556c6d,1.3.6.1.4.1.311.60.2.1.2=#1312426164656e2d577565727474656d62657267,1.3.6.1.4.1.311.60.2.1.3=#13024445,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2a:09:50:26:3e:06:49:6a:27:81:f5:50

Issuer

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 11, 2018 - Jul 11, 2021

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 2, 2019 - Aug 1, 2030

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 2, 2019 - Jan 18, 2038

Minor OS version

0

Major OS version

4

Entry point

220758

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

.reloc

SHA256 2e52f3f0668db4617d274702b262013f3c7c70bb609fdf5c1f6b022ecd6cbb09
MD5 50c2d6a5c279db174b79783003c5a0a5
SHA1 7940e9e88017265f6784f63f9fcbe7a49714f95f
SHA512 1b10e2d2c157dd5354eb4b571d351b21cd45b737fbc7b047fe19f76bd5c8c05f34980dd11670a74a16d1eded90db946f2159231491d70520afcb879af9e2ab25
MD5 SHA1 SHA512

.rsrc/0/GROUP_ICON/32512

SHA256 c369bebe3271775e43301281caa7efcd03938e3bc1f620212d6c5617edaad403
MD5 61e58469fe660c213ebc6e2cc66cbafc
SHA1 c47479da87d8390f935b337e91bdbedcc739b3eb
SHA512 4ecd27ce585a22f740db8d4111d7519d099f2f5afad722048d4fb050c36a8f88f159adcf7c2c93c524ec1e02e41c7bd16979a371693fb811d024124332353f87
TLSH
T1F2B002119765986FD2E106BC09576B07057EC8E632720792452F45A87C433BD687DB50
MD5 SHA1 SHA512 TLSH

.rsrc/0/ICON/1.ico

SHA256 55f6089552cd0561552127b70c184ad2c79478cc2caeaa40ed71f1f1e56a2c8f
MD5 6e95cabb33a366c999753460efead227
SHA1 545a98b8bb0b7a804cf9906c6a1d6418d0aa775b
SHA512 d2653e140c2e5dc9f7ffe2b2fc98a3ec0ad2d021e0fdb89f238b0f185d313c2338da609c10aca0ad22db95a484767ceaecdb8cfe0ea4410d72b3f34fb3aa1519
TLSH
T168212772BA04D5C4D571B6F1D92ADAE607D11C1E6C88418256BB3D2FB4344A7EF2853C
MD5 SHA1 SHA512 TLSH

.rsrc/0/ICON/2.ico

SHA256 bc16d00edec603a546d49cdb89ac59c67c0fd823c2e9fb06383d41efb80a3cd2
MD5 77e7ea33d1019ab361292957b386c5e2
SHA1 0ddf102044c3a2e8cba818bfe90853a1b489a7da
SHA512 760148d65b8a313fb92102b49f5155f48101c45d3b98b1825a59e7fd24e96683de1bf34e466c4855a1d88b199e63ab901f48f09fa2646445b0f4b15004251307
SSDEEP 48:Tg3bVNe49Z9LhdznJkyBVLBBHb31UOOrO2SB2NNg1F0U:M3FLhBeyBlBB73134NNCWU
TLSH
T1C891CED9ED88EEC4D4B2B2F0F4998A354B491C51A48446D40EF8FEA50A759B7CC6B03F
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/0/ICON/3.ico

SHA256 f90439382d146ed957fa5d47b2aa21bdd42b04d74555c9f77129f38b853191d6
MD5 bc2ed13ddeaaa6763b99278e61908161
SHA1 a96a2461cd4b19f25bb5bb0608b6aff7e0b313f4
SHA512 a7419c714207c3cb9edd2c230d308c37380f52cc30eb36224fd0e9f061d687f773f5c0e3e6f02a5326462234f376b525371c05f29a4f189611e7ae7aae3244f1
SSDEEP 96:cfIV7h+/RUw6b8cxcr0pCpXu6gggggczpZwMxF9jMQq:2XRUw6Q70uXu+ZZx3YZ
TLSH
T1D012C1D97944DD84D4A1F2F0E00AC99207653DA6E84846CD2AFABE7F817406BCD6743F
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/0/ICON/4.ico

SHA256 c59fa305fd31ab35af7dd18b0ad0048659ef63a5f5e7bf4a00b364749c5af76b
MD5 ac8724fa0ce7c557b9036acc9c81ff07
SHA1 4595caf18ff721c42248ad62a23442541efe336c
SHA512 2a41e59e6a0fa8c3a2ab26139ab606d997dfd23672612908fb560ffae6916db9e9fadbe87b6c4ae0be201a3e61f6217ce813f76ef3f97275b4039512c3c744e8
SSDEEP 384:DeQr3xl56BBBBxJBBBBBBBBBB+rKMi777777777777777777777777777777:/p24rP
TLSH
T1877278D96C888EC0E5A3F1F0E44A936207A52D95F4C906C84DFAB97E4975027EC6B43F
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/0/ICON/5.ico

SHA256 2e23b846fa35e7a3c0c9ba0dcdc1417555198194f1fe93f2aa6efc8503d256d0
MD5 9decf6b59e673ff21e3422f54b5b3fb6
SHA1 67a5b250373a15dfd12cc015ddd37bf441ec64a4
SHA512 ee2f0f96d6897e7f93f1054709e53365f9f30cf5b129a4c5ca3899886310c2ed8fc04dc77dc7b2a95666b48980fc0e089f466ceab1a3679f7361d8807557fc32
SSDEEP 384:cisSpHVIVMtmIxpxQMh4pAiEbvd3777777777777777777777777777777777775:2SVVyQmExQMsAi2
TLSH
T1FE6388D9AD888DC0E563F2F0E40A86A207A41D55E8CC06DC4DFA7DBA85754ABEC1743F
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/0/ICON/6.ico

SHA256 9d9d4d62ce9442d0610bd664afbe2749a0dbd4ed274ee1923d4c285042861758
MD5 94522d7bd10b3fe8e7d2ba8c16ab8570
SHA1 b71a3578d489c8c58fe0f4a58de89a7dab692c49
SHA512 7ca23ba0046eae4f2d575be4da76809b99b8ab45f8cd1ddcbbd1ea3c4f638f87f13032981f2c7dd9562535f6ea0bab9735d7b43164de0d8798fdc54bd037f3dc
SSDEEP 768:m5p980oL2y2odYcKypPI8jNM+6hMTPWo5YOS6HewvH5c:m5c0o6y2IYRqH5c
TLSH
T13B445BD6AD888DC0D972F2F0E44A866207A41C55E88C06DC4EF97DBE45794ABED1B03F
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1033/BITMAP/30994.bmp

SHA256 baf0520b920913155bcbede3d0ff5fae3a3506566de13a501f9aca07c15f9745
MD5 402153c80dfbf6ad10436b194226e0ae
SHA1 96366369e4f4fde8649fe6dda4d9359f7d4685c4
SHA512 f56999ef56b3c29bd65589eb091b5012d99ca609f6f6dad3fb081c4a0b252cad5060f390a90d259ffaad30934b028ee3321f19318b1e08b432a5c204200328cc
TLSH
T170D048AA70184AF0C028043C8EB78AF81E209C2288080107A2F0BE3E3CF0A24343E8D0
MD5 SHA1 SHA512 TLSH

.rsrc/1033/BITMAP/30996.bmp

SHA256 d4f6f3f9bf38396dfe3e590650308c81395f9873ae257ae639cb3b63b150bb10
MD5 9dd8fb34457d5d3178508ccb1fc247b5
SHA1 1365fdf5c2323e3f80b95867aad53a10ffd8dbab
SHA512 12023b23275c2d492f28a6d82480683b0b8ac9b2b1aae273406a307ca7d5e979e8331b7c63d763016d39ba3e1b249c5b682b6ee2b456ce1c0201ef80ddb0ea94
TLSH
T12FE0673571146354D44D4C3A4A338AB92FB83C06ACC4493E87F47AAF2974341658DC49
MD5 SHA1 SHA512 TLSH

.rsrc/1033/MANIFEST/1

SHA256 e4039327090739a6754db86ef1704a8a07115ceb11719c0987a9d00a77a77f16
MD5 87d4fc207e2f334ede55ac9160602c94
SHA1 32b9b90a524d4a352d4bf719a0c8367534b7465d
SHA512 94b872f14fc7257f8ffd0d7a8fd982a4523554419183527a040bee824f01b29dad97ea9cd3ddad7180a53678ee94c8084a3ea92d2584ffa074e0970728da2bad
TLSH
T100111281D438E566E71202E73FB8F55915BDA33B0DCC4AEDC4C69A7DB202A8B86121A1
MD5 SHA1 SHA512 TLSH

.rsrc/1033/version.txt

SHA256 7ece5721924f5aaa19676e8eb734cbfc3b570292392f26b36516018923ab10d0
MD5 a655275c8a8ff924bdf7304f074fb579
SHA1 31a04032dfecda6ceb01cd241f1451c8837d1d27
SHA512 a1138ec2089c7016c286c7b5acbd2e99f49b3195725196f22f26b5077f6990306a22c325c5b5b3638eec3c20cfdabbd7640d6454b61d5b6aa337b60524972118
TLSH
T14121C006A6FB2258B0B7BA8D4BEA8C3507577D50083E965E96CC7E4D0FE30005522BF3
MD5 SHA1 SHA512 TLSH

.rsrc/1042/BITMAP/199.bmp

SHA256 abcbec5fa9b95185d4281cacecc610bf2c210812ff5f83dc7a1195ea006350ee
MD5 f79b7236515f9986fdfda2fb3e696891
SHA1 37b5ef60182bb050e5cba9b22070237c56fc2759
SHA512 ff8594c045f0b70e0366700db07f5e00587d82484e72afac5954d2021c6c6dc4326aa290304f0752b3660568d6c3af7bff385438ac610ff7b432afe4580739a1
SSDEEP 768:6wkQYkdhkqk/cv/nM+bpaQWSxc6qped2ERPkX/K/Ao8:6Mh/9vqped2ERPkXxo
TLSH
T1819333A05AEAE547FF7044B588E64D20BED1B40F015FCD66628CE79AE0C7F81B8BC545
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1042/BITMAP/202.bmp

SHA256 f45ee71b37acb138f1edde934eac649ee4d08116068c60bfdddd193ddf9ba662
MD5 4507861b9c8a26dc4df67a855c41e353
SHA1 fe91fd09fa2bb84b5dedfbdc80e7cf792ab11223
SHA512 3ce4a901998e37239e657da34b3f5385c4177ecacda52fbdc018f0cfe1277e4a213d79cbf609284edfeca143ea6fc1908798ee043dd2270aa3017cadc2506a1e
SSDEEP 768:l5Zat9YRWrRr1HkaW5X/V0UmVKpkdkjZD/:5kxChmH0Zj
TLSH
T12093B6E42B984A879E444992CE7ADDBD05728DA75871F0C39B937A5B1ABC3C375001CF
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1042/BITMAP/204.bmp

SHA256 3f4df5788538a47bbb8d7137762cfb45227b36fdc3ed2971e8885c5808860dac
MD5 d5fdf4f7386402063c00b641a0e8217b
SHA1 04ba570897d6dbe1f8f9d377d22eea81ebada1ff
SHA512 3747f6f9ac24aee02acaae8ead29acd4845b70aa9a46d1eaf423f11988be81910d897003f1e41761edca19957a56be883bf5ffcc750885c8b32374b31171196e
SSDEEP 384:yQ2RNPIQfYVSZZvLWANmMeHzEsk2x2Y735Hih11UH3a2P1l0im7M:dqHfjf3eAsnL1HK11UQ4
TLSH
T1FA933B61196DB144CC8661689DECC1FE62933CEDBC13E8C3674137BCB8B12AAB94E55C
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1042/BITMAP/212.bmp

SHA256 754f2714b5c54a381a879b6467b969b7e5df6dfb1df208a186762329f6ec7fe4
MD5 3501a0a4bad125b6cc1e399645a72e99
SHA1 7c538e63c821ba1756156420a2b58a4b310046bb
SHA512 70fb7d2c12c24e5e10fe6a66c8a80a63a1a1bda5d13ec8baad9fb37721fce1da3437358bbb1138539f01a47b5ec5827239fdf8336579d7302df8451d695fe356
SSDEEP 384:y8vocih59+8rO8hrE3r0atlLlBqFGBG45dGX2:U+QE3rBtVKCb53
TLSH
T19A933BB1BB255D64C5649E3951B5977C34A22C98887DAC9B81E33BA223702F37C05CEF
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1042/BITMAP/228.bmp

SHA256 c80b28a40c6c3032990ca919de10bc258ebe7f9a42fc92dc34aef06dbd42d9d2
MD5 968229fa9207aee63b4f9734e9b9ceca
SHA1 31462e669cb0b51367e1a1036b3ac355f9f06c64
SHA512 333afacb7fd65e3046a7841c1ba82df821a4ccfd5e88fdf33754dd4df911cc46cd2041f2f6fa4d4229f2d4f059226b9ad99bd5211a258fce7bba06cd920c1df3
SSDEEP 96:fU8JLwG1T0SuBh/xYEun0P3SdSx40dhkuBskuG:f9Jsa0SOh/L823mSXAuBSG
TLSH
T139227286C30F295BB7D09B995F90238533DF3EE42C20ED4D145CBD851BB7EA0248C59A
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1042/BITMAP/234.bmp

SHA256 2fbfd1232b795a2c876eaad7f297485bdc2015e094cf7a4ba6ee6d2480469f64
MD5 2296737e931e7e8e50ff4c97cf1bd11d
SHA1 3b0cf3c8814f9fc3504dadada3bbdcdafcdcf7b0
SHA512 f61069615aa0fde1bc6a76f2d47f66b279b02fc63d11b6cd93589dc67372b89d7909385515298f17eee1532fbb6f9f86151f1f8be7179d3774fea376e94a418a
SSDEEP 192:J7xoDFk2rKTMfPwJiBpQlqDAdMrGjpLK6dSv1:J7xwkaVPwJEpQlqDAdMCjpTSv1
TLSH
T1B9B20DE4FEEA546AC26CCE308B3CA660B51EDDF56C5DE006541731067BF848251872EE
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1042/BITMAP/237.bmp

SHA256 ead95ad4ed374a512e7348a93b442cea74ddb9394ddbe3fbcec61d2279baf993
MD5 c4e777d457cae915dba181c2d8a5be87
SHA1 ed5580e0e4d35c46aceb277aa63742d62e26805c
SHA512 519b86f209bf283eb5ceab8bd733f518433c5dbdde57ed45b506a090b04c2d30f1bed8002d825a161c26ea5fc583408988fd42a2645b92511084a9cc0e21d7e2
SSDEEP 48:ql0bPs/opmDojFn7Gq8ibd595aVCr25teaLh2n+ehh:Vbs/lDkJDpn95aVCrEtdLknB
TLSH
T1958276B9151447B2CE5D9A30E0DA44DE6FD93DC86EFDD41F115EB9C704B12436ACB029
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1042/BITMAP/239.bmp

SHA256 b6421f0f343cc57a0bce1df5d9a698f32c6ec8931dd323c21657b8787a9d8a46
MD5 8779b063eb69f4cd9723fc19028843fb
SHA1 8ab9aea3ef757c8109bfd7fbd55d4a558709818c
SHA512 b5d78fb9fda97f5231a4b87e7ba4d169ceadb2e52dbf17dc949548fbbe2ccabd7fcebb814d3d4173c96044bc3286f6adb16e114a0650ffb0f08d61ca692f314b
SSDEEP 96:JxLCufzVYrNI4tsx4V2jdAjZTLNzIbVfl5yFM2eraw3kqc01aXg/pg:JYMmJZtsJQhLuRlcFM2oapqc01igO
TLSH
T170B2CBDC8F49CA5CFAF044AE7DD1816080972E568462E9867EB27CF21E785E025DBDC2
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1042/BITMAP/260.bmp

SHA256 1e4ca96d98aaae0f209aebd885496de0437b7903573a43bd696d27f6043f28f4
MD5 a6d97ee0ac09365d31fbec7d58a4267e
SHA1 3dd6e93ec1da5c4998c5ebc927945a5fd858974b
SHA512 a241411eaf3056cfca52e19317f7e772e7437434ddbeff2ac8225c464015bd81b8c8b12a28ea2a46c218189d6e7087bb6c162710b71c394d07fe156d8db319c2
SSDEEP 192:/fGRH18+ef+FcBxADJd7qsI2rCnyCn3B/I7iV:/oH18v+FMADX7O2rCnV3tCiV
TLSH
T189C2A51C3D145360C5E278AAC5BB866D9D291DA59803EC13AB0DF0E393321F79DE66B3
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1042/BITMAP/275.bmp

SHA256 f40c4e71fe6ef7529046e593b458b13f1acdc7bb783d07d03b1e5871927d78d0
MD5 6d13a72771d456fb54080679367b1013
SHA1 9fc784470649ed12ff4d58fd01dabf43396f17cb
SHA512 1e397fa32a2c3940c54b8a4f37a0a670ad203d96521fb827216452d9c35d6e81dc2e4343ce27560ba31049e9deb0990f12ef0cbeecc0b6f59bba6fd7078936a7
SSDEEP 96:xOpv7nRXrDypaedyAqWUmrDysZoLuWWtPLAQ6gtgpF/1:xOpv7nFyyAqWZNYEtAQRgp3
TLSH
T1AB223F7165CEA3A091C35D63F05A39C9ECBB0F31706DDA362C41B2B85AF79144FA840A
MD5 SHA1 SHA512 SSDEEP TLSH

.text

SHA256 e94c61f45e172d71582139b7bd1de8e9d0825f0d7c190c8c0c06167501029154
MD5 4b54a75e21d59d0588f7b477d3c2c571
SHA1 0d9c7ba9a46eaf4a9956d148d56b510af0a7b099
SHA512 0a250c4624cb759b1614bf13ec3fc37b2153b88bdea5b6f0211a364708c1d6bf22bf694de10feb41f2ae1f9ac953aae5463cb64d829b4ddb50280ca1962e70b1
SSDEEP 6144:TPsgaos59mhB+OmImiien/9VmOweTaj+IwyOjIWsb8+Z:TEVD9Afki//axeujDwR0Xb8
TLSH
T16924F2A8AB7CA617CBDE05B66890764357B7DB42B313F3A94FE0859F0883BD1C916143
MD5 SHA1 SHA512 SSDEEP TLSH

CERTIFICATE

SHA256 55b0923964b49dbba79b8ab7fb0b1f3ecc75d73accf41d3312ca6afb17887cfb
MD5 58139cf52aeea080a3208f44f04d6937
SHA1 7e490346b2b3dc5b04216f4b81aae5d2d0efaffe
SHA512 3ca3a05263879d56897786756e1543f8ac42ad2c666164d8b27ed86e97dd11736038db2a252ad73ee76ba0668c58a191f962dbbb6baaf8a92fb25c41b3b2cb16
SSDEEP 384:VEosTelkoI7EBeZsZZvTzEn2lX7gsPKITMQJK2XY3KAeDTFGNGb5hiX8ZpHof0:OelkXSNXS2NL/riXiRF
TLSH
T1FFC29E975B5D2D43DFD5ED68B0C4E823AD70F6C1AE9884AA5026C05449C17E27FDC21F
MD5 SHA1 SHA512 SSDEEP TLSH

[0]

SHA256 a25ccc65dfb4bebb6236734120498ed707f346f2e3e5f20a1e880bb104759f3a
MD5 b8e1e4342b635cae7486692bdea47357
SHA1 8f482f6605945dc7ff5f9b93133c67ae5ce4d41d
SHA512 91606dbcb87adbadb60d1b191594d0cecc37718aea92a59c1b9d25c0c26ad19ee7041d403f2c4c172ffbe33cc10764814193943ade0518c3d01a5235a152487f
SSDEEP 96:KH2T198ai2cymax4o3JUfhdyEi7ZHeY0/XfjnEhyo:KWb8a9Tm24IBZHk/vAh9
TLSH
T1DA91D9A6CA601C82AC17CC3031D88A17AF707386AAC0C5FBA559D1508F837A331BD17D
MD5 SHA1 SHA512 SSDEEP TLSH

TelegramInstaller.exe

PE Signature issue

PE Signature issue

mscoree

dotnet

.reloc

.rsrc/0/GROUP_ICON/32512

.rsrc/0/ICON/1.ico

.rsrc/0/ICON/2.ico

.rsrc/0/ICON/3.ico

.rsrc/0/ICON/4.ico

.rsrc/0/ICON/5.ico

.rsrc/0/ICON/6.ico

.rsrc/1033/BITMAP/30994.bmp

.rsrc/1033/BITMAP/30996.bmp

.rsrc/1033/MANIFEST/1

.rsrc/1033/version.txt

.rsrc/1042/BITMAP/199.bmp

.rsrc/1042/BITMAP/202.bmp

.rsrc/1042/BITMAP/204.bmp

.rsrc/1042/BITMAP/212.bmp

.rsrc/1042/BITMAP/228.bmp

.rsrc/1042/BITMAP/234.bmp

.rsrc/1042/BITMAP/237.bmp

.rsrc/1042/BITMAP/239.bmp

.rsrc/1042/BITMAP/260.bmp

.rsrc/1042/BITMAP/275.bmp

.text

CERTIFICATE

[0]

Sharing

General

Malware Config

Signatures

File Explorer

TelegramInstaller.exe

PE Signature issue

PE Signature issue

mscoree

dotnet

.reloc

.rsrc/0/GROUP_ICON/32512

.rsrc/0/ICON/1.ico

.rsrc/0/ICON/2.ico

.rsrc/0/ICON/3.ico

.rsrc/0/ICON/4.ico

.rsrc/0/ICON/5.ico

.rsrc/0/ICON/6.ico

.rsrc/1033/BITMAP/30994.bmp

.rsrc/1033/BITMAP/30996.bmp

.rsrc/1033/MANIFEST/1

.rsrc/1033/version.txt

.rsrc/1042/BITMAP/199.bmp

.rsrc/1042/BITMAP/202.bmp

.rsrc/1042/BITMAP/204.bmp

.rsrc/1042/BITMAP/212.bmp

.rsrc/1042/BITMAP/228.bmp

.rsrc/1042/BITMAP/234.bmp

.rsrc/1042/BITMAP/237.bmp

.rsrc/1042/BITMAP/239.bmp

.rsrc/1042/BITMAP/260.bmp

.rsrc/1042/BITMAP/275.bmp

.text

CERTIFICATE

[0]