AnyDeskkkk[.]exe | Triage

Sharing

General

Target

AnyDeskkkk.exe
Size

16.2MB
MD5

12da246ea8911fe41b6c4ece68e9d357
SHA1

7f24867c3b9489ad1f0bb757102e2e1aff7dff15
SHA256

8d376d0404e710f9a07b6ca662fa5ec2929f306dac00fa4222a173a345883bd7
SHA512

d2abba94342bc4b88926e2fc4994ef6c3297f52c6059088619a556e9fe1f49e3b9ca29abf089ea83a7cf8687193794697578b18a08478d147460fc9b688cf5be
SSDEEP

393216:TJej5O+Jgcmky/w/w/2bDv51GRZDi9ivR:6ZbDv7GnDiEv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AnyDeskkkk.exe

Files

AnyDeskkkk.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

1U5R9E,R
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1U5R9E,R
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 15.9MB - Virtual size: 15.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ