AnyDesk (DUSK V4[.]0[.]1)[.]exe | Triage

Sharing

General

Target

AnyDesk (DUSK V4.0.1).exe
Size

5.4MB
MD5

b7b003203a1aa0f15c2fdcfe2845751e
SHA1

33b73b3873662990f3865b88fca30d74efdfbfc8
SHA256

3287f7925e1e4fd2b323406ade13d898d5276de196948b59037abb4ab00cbebe
SHA512

bf5927f32ea1af941b83d7d9f5da6f9bcc75241c327d8d2e97d4a22c6f3c8a5f515acdc8811ac3c89bdf73890cde0d533c6e0bc8fa1c7dbc68785761112e854e
SSDEEP

98304:41Uoqr01EWPUEc5zyEVSnXJ7fW7PoJMcaulck:/oq44EG2EVA6PRcPlc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AnyDesk (DUSK V4.0.1).exe

Files

AnyDesk (DUSK V4.0.1).exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ