AnyDesk (1) (1)[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

AnyDesk (1) (1).exe
Size

504KB
MD5

81d6e71a75e590237041e38851756dba
SHA1

4e4f4a08dbcfbb6a7a81a1342d88fedc4a274039
SHA256

7506f9a562913ff2cf1b6075ffc6fc3e0984f02762e42917b5176eabb719bc4d
SHA512

95f40652b6891f9ac7c8cb55a21b6d34cab68b1524d523a43e4b72219e430ef604857fa0d93b67e8f91d9086d50d551a453950a7e0cd7c7e3bfc39ce73a96eb4
SSDEEP

6144:xKIS6VcgH2zGfhJ1PGicZiuU39nrXhjwiCGfonI2cyXnhn3hUVib0tFGUSN3UsEJ:2zGrOiusrNot3rU6N3UQH+On/Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AnyDesk (1) (1).exe

Files

AnyDesk (1) (1).exe
.exe windows:6 windows x64 arch:x64

cf0c5c9550130e5a096ffb642ad38d6f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Shabzzz\Desktop\Comission\x64\Release\Comission.pdb

Imports

kernel32

MultiByteToWideChar
GlobalAlloc
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
LoadLibraryA
QueryPerformanceFrequency
GetProcAddress
VerSetConditionMask
VerifyVersionInfoW
QueryPerformanceCounter
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
CloseHandle
Module32FirstW
Module32NextW
ReadProcessMemory
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetModuleHandleW
VirtualProtectEx
OpenProcess
Sleep
LeaveCriticalSection
WriteProcessMemory
EnterCriticalSection

user32

CloseClipboard
SetWindowPos
GetDC
EnumDisplayMonitors
GetWindowLongW
ScreenToClient
EmptyClipboard
GetClipboardData
SetWindowTextW
WindowFromPoint
GetCapture
GetMonitorInfoW
ClientToScreen
IsChild
SetLayeredWindowAttributes
SetFocus
BringWindowToTop
LoadCursorW
SetCapture
SetCursor
SetWindowLongW
GetClientRect
SetProcessDPIAware
ReleaseCapture
SetForegroundWindow
IsIconic
OpenClipboard
SetCursorPos
ReleaseDC
GetCursorPos
AdjustWindowRectEx
GetWindowTextW
SendInput
UpdateWindow
GetDesktopWindow
PostQuitMessage
SetClipboardData
DefWindowProcW
GetKeyState
GetMessageA
TranslateMessage
UnhookWindowsHookEx
GetForegroundWindow
PeekMessageW
SetWindowsHookExA
DispatchMessageW
GetAsyncKeyState
ShowWindow
RegisterClassExW
UnregisterClassW
CallNextHookEx
CreateWindowExW
DestroyWindow
GetWindowRect
DispatchMessageA
MonitorFromWindow

gdi32

GetDeviceCaps

msvcp140

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?uncaught_exception@std@@YA_NXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
_Cnd_do_broadcast_at_thread_exit
?_Xlength_error@std@@YAXPEBD@Z
?_Random_device@std@@YAIXZ
?_Throw_Cpp_error@std@@YAXH@Z

d3d9

Direct3DCreate9

xinput1_4

ord2
ord4

imm32

ImmSetCompositionWindow
ImmGetContext
ImmReleaseContext

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memmove
_CxxThrowException
memset
__C_specific_handler
__current_exception_context
__current_exception
strstr
__std_terminate
__std_exception_copy
__std_exception_destroy
memcpy
memcmp
memchr

api-ms-win-crt-runtime-l1-1-0

__p___argv
_configure_narrow_argv
_initialize_narrow_environment
_c_exit
_register_thread_local_exe_atexit_callback
_initialize_onexit_table
__p___argc
_register_onexit_function
_exit
exit
_initterm_e
_initterm
_get_initial_narrow_environment
_set_app_type
_crt_atexit
_beginthreadex
_seh_filter_exe
terminate
_invalid_parameter_noinfo_noreturn
_cexit

api-ms-win-crt-math-l1-1-0

fmodf
__setusermatherr
acosf
ceilf
pow
floorf
powf
sinf
sqrtf
cosf
roundf

api-ms-win-crt-stdio-l1-1-0

fclose
fflush
__acrt_iob_func
__p__commode
ftell
fseek
__stdio_common_vsprintf
_wfopen
fwrite
fread
__stdio_common_vsscanf
_set_fmode

api-ms-win-crt-string-l1-1-0

strncmp
strncpy
_wcsicmp
strcmp

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh
_set_new_mode

api-ms-win-crt-convert-l1-1-0

atof

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 296KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cf0c5c9550130e5a096ffb642ad38d6f

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msvcp140

d3d9

xinput1_4

imm32

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 296KB - Virtual size: 296KB

.rdata Size: 192KB - Virtual size: 191KB

.data Size: 1024B - Virtual size: 2KB

.pdata Size: 13KB - Virtual size: 12KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 196B

.text
Size: 296KB - Virtual size: 296KB

.rdata
Size: 192KB - Virtual size: 191KB

.data
Size: 1024B - Virtual size: 2KB

.pdata
Size: 13KB - Virtual size: 12KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 196B