AnyDesk (COCAS CLICKER)[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

AnyDesk (COCAS CLICKER).exe
Size

690KB
MD5

9062a0d780884a2cbb571a171cfc77dc
SHA1

c8f1a00ef28d0f23ce1f014137d81edfdf976792
SHA256

b71a7c91694294969d2d8a0d4dd18f23bde0a9efcb31584e7ae4e417b17d07ff
SHA512

29e5594790257dad99b7d209325c0226bfd795f70a6e846ef06f8bcfd36296cdbefdf279c26eb82bf72218efa010498e084c150a8984bac1a1e8abc431799f25
SSDEEP

12288:U12AOSfYH/y9nLfc1IwLhTMxHzNeKK/JJC+qxxhS9O68GYcH/oO:NARfcK9nLfc1XhuHzNed/JE+qxLqOjGR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AnyDesk (COCAS CLICKER).exe

Files

AnyDesk (COCAS CLICKER).exe
.exe windows:6 windows x64 arch:x64

758f93aef27ec639fb4c02b7d594b1a5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\bc\Downloads\empty-clicker-1.1\empty\empty\output\release\empty.pdb

Imports

d3d9

Direct3DCreate9

d3dx9_43

D3DXCreateTextureFromFileInMemory

kernel32

CreateProcessA
MultiByteToWideChar
GlobalAlloc
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
LoadLibraryA
QueryPerformanceFrequency
GetProcAddress
FreeLibrary
QueryPerformanceCounter
GetModuleHandleA
CloseHandle
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetModuleHandleW
IsProcessorFeaturePresent
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
IsDebuggerPresent
DeleteCriticalSection
GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId
WinExec
GetModuleFileNameA
CreateThread
InitializeSListHead
GetSystemTimeAsFileTime
LeaveCriticalSection
TerminateProcess
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
GetCurrentProcess

user32

DestroyWindow
GetWindowRect
GetAsyncKeyState
ClientToScreen
IsChild
GetForegroundWindow
SetCapture
SetCursor
GetSystemMetrics
ShowWindow
DefWindowProcA
CreateWindowExA
PeekMessageA
UnregisterClassA
PostQuitMessage
RegisterClassExA
UpdateWindow
GetCapture
LoadCursorA
SetWindowPos
GetClientRect
ReleaseCapture
SetCursorPos
GetCursorPos
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
GetMessageA
DispatchMessageA
CallNextHookEx
SetWindowsHookExA
MessageBoxA
UnhookWindowsHookEx
TranslateMessage
SendMessageA
FindWindowA
ScreenToClient
GetKeyState

msvcp140

_Xtime_get_ticks
_Query_perf_counter
_Thrd_sleep
_Query_perf_frequency
?_Xlength_error@std@@YAXPEBD@Z

imm32

ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memset
_CxxThrowException
__current_exception_context
__current_exception
__C_specific_handler
strstr
__std_terminate
__std_exception_copy
__std_exception_destroy
memcmp
memchr
memcpy
memmove

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh
_set_new_mode

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback
_exit
_initterm_e
_initterm
_get_narrow_winmain_command_line
_set_app_type
exit
_seh_filter_exe
terminate
_cexit
_c_exit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_invalid_parameter_noinfo_noreturn

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf
ftell
__stdio_common_vsprintf
__acrt_iob_func
fflush
fclose
fseek
_set_fmode
__p__commode
fwrite
_wfopen
fread

api-ms-win-crt-string-l1-1-0

strncpy
strcmp

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-math-l1-1-0

ceilf
cosf
acosf
__setusermatherr
sqrtf
fmodf
sinf

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 213KB - Virtual size: 213KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 419KB - Virtual size: 425KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

758f93aef27ec639fb4c02b7d594b1a5

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

d3d9

d3dx9_43

kernel32

user32

msvcp140

imm32

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 213KB - Virtual size: 213KB

.rdata Size: 45KB - Virtual size: 44KB

.data Size: 419KB - Virtual size: 425KB

.pdata Size: 10KB - Virtual size: 9KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 176B

.text
Size: 213KB - Virtual size: 213KB

.rdata
Size: 45KB - Virtual size: 44KB

.data
Size: 419KB - Virtual size: 425KB

.pdata
Size: 10KB - Virtual size: 9KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 176B