cecbb3993955cba6e93d7da6faec6e1934c7842453c823785be5f355001c2e5b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cecbb3993955cba6e93d7da6faec6e1934c7842453c823785be5f355001c2e5b
Size

3.7MB
MD5

ee31d93bb8032b3dedd1e7b1712ddb06
SHA1

32c49f03414417425d3478f960e51d15e3bc67be
SHA256

cecbb3993955cba6e93d7da6faec6e1934c7842453c823785be5f355001c2e5b
SHA512

28ea2738d2b718ab397febfd2c995465bfdd9446b9794def7f0051dbc756f2fcb299f947ab0996dce59ac03cdd04fd02a737aaa289c2316b8ef096d612d6cf88
SSDEEP

98304:JW0Ughn1zD8gmJUikb59sFaZw3abaqt8+Uen/xIE:JWBCn5D8gmJUrvsFaZw3HsJIE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cecbb3993955cba6e93d7da6faec6e1934c7842453c823785be5f355001c2e5b

Files

cecbb3993955cba6e93d7da6faec6e1934c7842453c823785be5f355001c2e5b
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Buildbot\ad-windows-32\build\release\app-32\win_loader\AnyDesk.pdb

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: - Virtual size: 11.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 762B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dummy
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_MEM_READ

.custom
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_MEM_READ