b07adc1e68732e4e3a049b4b113e3769ec600c22c0c50e8477fbd5c1d1503ac2 | Triage

Sharing

General

Target

b07adc1e68732e4e3a049b4b113e3769ec600c22c0c50e8477fbd5c1d1503ac2
Size

3.7MB
MD5

575c6498e0d39a1b6cdd99dbd2256f1d
SHA1

c210061324c8136149b18f09fbf209d9ed567320
SHA256

b07adc1e68732e4e3a049b4b113e3769ec600c22c0c50e8477fbd5c1d1503ac2
SHA512

d23a413b54777873166b92986a5484b7f055127d2bf6803f4a34b484a944bd0969829e3f1b49223b7a35dbef095dffb9a9c51de4f1cc778defc6480560559def
SSDEEP

98304:UW0Ughn1zD8gmJUikb59sFaZw3abaqt8+Uen/xI2:UWBCn5D8gmJUrvsFaZw3HsJI2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b07adc1e68732e4e3a049b4b113e3769ec600c22c0c50e8477fbd5c1d1503ac2

Files

b07adc1e68732e4e3a049b4b113e3769ec600c22c0c50e8477fbd5c1d1503ac2
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Buildbot\ad-windows-32\build\release\app-32\win_loader\AnyDesk.pdb

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: - Virtual size: 11.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 762B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.custom
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_MEM_READ