AnyDesk[.]exe | Triage

Sharing

General

Target

AnyDesk.exe
Size

361KB
MD5

b9c6b17e7b9dcc726db4e7775dd1f043
SHA1

4843a3c455b54e37454862e36ce505a2ebfc5f87
SHA256

d31114bc50343038002dac888e0a4bc545c22b0fc08230cc90d83476b5256640
SHA512

c6f9f8488a564df4495f45c9cfa9d4ea8b44ba01892fb58678dacebb3d6efaf659335acdd7a20757c852c063489c0ec8dbb9919726bfd9d8ba2788867706a091
SSDEEP

6144:3EcfvB8/1xxlje6VlWT8b9XmIbDauIG+3bZr9kjC:3FOPVle8ZkF9T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AnyDesk.exe

Files

AnyDesk.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 354KB - Virtual size: 354KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ