Static task
static1
Behavioral task
behavioral1
Sample
AnyDesk (4).exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
AnyDesk (4).exe
Resource
win10v2004-20231215-en
General
-
Target
AnyDesk (4).exe
-
Size
1.4MB
-
MD5
055fc495cd42cf445abf2f8fd99f2e4d
-
SHA1
81f2bb25d57894f6a87bfcbf1c885ca0881e1578
-
SHA256
6d335ee4ecfb270693e6054e9cd7d0cbdb4c4735d1a3229f059226a9fbd60a5a
-
SHA512
ccfccce7ad1e227e724cfd53438c2b91a5b961476d38f72797e016ea65f6f542e9b8eaa53d1bad03a2d6f3250f81763654b2fef2ac45c5bc63e0f1ecd0c4bdd2
-
SSDEEP
24576:MoOqKw+chJgYOggDK10pvogD5Iw/xqVeUuBwkDvWnOQVj+FYeZIJxIPiPNQwfI/:MoODcjlcj9IwIVB5k7Wn5i/mJKkpQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource AnyDesk (4).exe
Files
-
AnyDesk (4).exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ