d09fa9a367e167d31010687146d1bd6f7c9de8de73d3a185b2a016df96b72a4d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d09fa9a367e167d31010687146d1bd6f7c9de8de73d3a185b2a016df96b72a4d
Size

3.7MB
MD5

c4f2f5c3f3776cb00c6a6f5c8318cc99
SHA1

6f48d41d41fd3cd215ff04542a6224d93b8a5ef7
SHA256

d09fa9a367e167d31010687146d1bd6f7c9de8de73d3a185b2a016df96b72a4d
SHA512

5766366c6d4ff225df70bcb916d95a529d47bff386c55f25eb6bb9df57c31fc6507d47efc57e1926e7c6120f74b536051bf1204effc0e5641e7d3e70cab80707
SSDEEP

98304:Atc/iNuKEElj7Ssx6zXKJr9aEpaDwvVvtUD+yzOrf+AGUniav4Xbb7:Aq+LE4dxmoMWAwvNtmOBGPXP7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d09fa9a367e167d31010687146d1bd6f7c9de8de73d3a185b2a016df96b72a4d

Files

d09fa9a367e167d31010687146d1bd6f7c9de8de73d3a185b2a016df96b72a4d
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\anyadmin\Documents\anydesk\release\app-32\win_loader\AnyDesk.pdb

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: - Virtual size: 12.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 766B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dummy
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_MEM_READ

.custom
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_MEM_READ