Anydesk_4[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Anydesk_4.exe
Size

8.3MB
MD5

0cbfaa4de928fce534c15e1ab75eb21a
SHA1

f035af507942fff2f4fe66de69ee67f7d5bdaf38
SHA256

0d113b8ee55ddf0b1d0cad82332dcd8058f3025131b176e862c50b16654ce456
SHA512

c18d3677db589dab320c591e33ce3e254705abacbf7b914207950b2746d7ef0875d496bbe79f0a4903f988e42e07bff622dfb8b6981642045b68d8b0008a88b2
SSDEEP

196608:EJZ136UotbGsOtVhBsTgRRwfBeu9bVKUbW94p1:EJZV6NUEgLwf9VVKt90

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Anydesk_4.exe

Files

Anydesk_4.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\!repos\Krokmou Clicker v2\Krokmou Clicker v2\obj\Debug\Anydesk.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8.3MB - Virtual size: 8.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ