Static task
static1
Behavioral task
behavioral1
Sample
anydesk.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
anydesk.exe
Resource
win10v2004-20220812-en
General
-
Target
anydesk.exe
-
Size
741.0MB
-
MD5
4fc97eebc04834efe6e93e4119375802
-
SHA1
49f6466483031536e21f78763471ecddc6863282
-
SHA256
e798243bb1b030e28541d6d19f971bf0acd87c95b57b7995f7f40a54d62ef307
-
SHA512
d9b80bef29112ad5de4939412d131034fa7d45c68bec7214d94dc60d3f2f32815f7080db4a840fdcdbf7339e652480856184e380afa394c36c2870b1c222398f
-
SSDEEP
98304:Kfu5exURKkVHEuNCpJ+3solt4cT/J8txnvkXWY4rE4Pktwm2KGq1rzA85RQay/xN:Kfu0NxJ+3rN8HvkXWvVPk2WAezYpT
Malware Config
Signatures
Files
-
anydesk.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
3Q?P(' Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 7.1MB - Virtual size: 7.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 111KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ