AnyDesk[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AnyDesk.exe
Size

2.5MB
MD5

feaaa57ffc179a37a96e6d2b3bf48f71
SHA1

2fcff947275af13ffcdd469ef6a10ead0776332b
SHA256

9ea6704e819e015f0f630135889e07f98071c2255b534c06ee09eb482b165290
SHA512

efc63fdb4fdd8e655f6e2aac4764751bfb7d0b3833a8546e94a9407d5de25d9b7e21e21af078d635294703cb7db9ac92583691f4cdee0a7c7ada7941b028c9bd
SSDEEP

49152:1wnah/WANzeweKASR5RRJ/MzV47Zb/9BPABpwWiYeUM:22ZUpduD/eV4dUz

Score

N/A

Malware Config

Signatures

Files

AnyDesk.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ