General

  • Target
    5733463654.exe
  • Size 5.4MB
  • Sample260722-w2celser3x
  • SHA256 7a3f36e38203ad0570fed7b3a9e5ab3b45acf21237db784d125f12be749ec5a2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 5733463654.exe
    .exe 5.4MB

5733463654.exe

  • SHA256 7a3f36e38203ad0570fed7b3a9e5ab3b45acf21237db784d125f12be749ec5a2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
4e:3f:8c:55:2d:ea:15:b8:f9:f2:40:9f:1c:82:d1:1b:b4:f1:95:18:41:16:b4:f1:95:33:df:24:95:05:46:be
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=AnyDesk Software GmbH,O=AnyDesk Software GmbH,L=Stuttgart,ST=Baden-Württemberg,C=DE
Digest
2f:9a:64:6a:e5:e9:ac:83:c9:ab:9a:03:28:6d:4b:fe:c0:5f:0d:cd
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=AnyDesk Software GmbH,O=AnyDesk Software GmbH,L=Stuttgart,ST=Baden-Württemberg,C=DE
Minor OS version
1
Major OS version
5
Entry point
13907
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Gitlab-Runner\builds\T4hxUfUPM\0\anydesk\anydesk\release\app-32\win_loader\AnyDesk.pdb