AnyDeskProffisonal[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AnyDeskProffisonal.exe
Size

365KB
MD5

6ec09b0b79f290bf6c202ff3b2edebcb
SHA1

f8bb0077c1f6fb04903d63fe89ffd754c40b99dc
SHA256

d365edc91b506148f8e890ce6cfad923971b0537a16490d115d6409ca4d9ba13
SHA512

b1d8f2fe57c495a6a5471b3b6fe018fe3edb70a277a7c98f283c97f06be614a6d590c17d4cd10e9b3d96e889cf0e1fa010dd9f5659934d9e6355e4b2c626a7a8
SSDEEP

6144:9r83DnWzE6XCx8fe6VlWT8b92ggkD08XbM4YV5mnZ:lUjAuSfPVle8wgx6VwZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AnyDeskProffisonal.exe

Files

AnyDeskProffisonal.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 359KB - Virtual size: 358KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ