Static task
static1
Behavioral task
behavioral1
Sample
Anydesk.exe
Resource
win7-20240729-en
General
-
Target
Anydesk.exe
-
Size
2.6MB
-
MD5
1260f4063a10df83764899a7e2126a59
-
SHA1
56b19520b85d2847304c02c2c0cc1f6774d782b3
-
SHA256
75a16dcebfd5ceed55da11872658e7456f47141476fc44a9159a25bf76da8613
-
SHA512
0f5d2862a1f8be40cec3caa8d850412693df1199c029e5f4021cd9662e4dd467dbe0e0f668b398f109b9357f297a08abb939509abc677558ceabcead8dda0397
-
SSDEEP
49152:hmWDukvNTiP4FsDG8ryS8woCFW7ACqZ0rFQU+pK0Mk:hzikVTsgaPb87ACqZIFQU+pK0l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Anydesk.exe
Files
-
Anydesk.exe.exe windows:4 windows x64 arch:x64
Password: 123
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
6}NK Size: 444KB - Virtual size: 443KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6}NK Size: 444KB - Virtual size: 443KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PoLBeYPH Size: 512B - Virtual size: 22B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.???? Size: 512B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ