General

  • Target
    file.exe
  • Size 5.2MB
  • Sample241128-g53cwaylez
  • SHA256 bbbedd933ac156b476e1b3edb3e09501c604a79c4ff1a917df779a9f1bec5cca
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • file.exe
    .exe 5.2MB

file.exe

  • SHA256 bbbedd933ac156b476e1b3edb3e09501c604a79c4ff1a917df779a9f1bec5cca
  • MD5 SHA1 SHA512 SSDEEP
Digest
0f:8c:32:32:a3:97:19:8b:76:f1:f6:3f:0e:b0:7d:9d:87:c0:45:12:07:3e:da:d1:97:6f:b1:bf:58:a9:18:9d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=philandro Software GmbH,O=philandro Software GmbH,L=Stuttgart,ST=Baden-Württemberg,C=DE
Digest
38:68:8e:f4:2b:71:c0:21:34:1c:e2:4d:f2:81:e9:da:b3:a9:8d:0d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=philandro Software GmbH,O=philandro Software GmbH,L=Stuttgart,ST=Baden-Württemberg,C=DE
Minor OS version
1
Major OS version
5
Entry point
7397
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Buildbot\ad-windows-32\build\release\app-32\win_loader\AnyDesk.pdb