General

  • Target
    AnyDesk.exe
  • Size 8.0MB
  • Sample260817-e3espatapf
  • SHA256 e0bb78dd82d1377c11e85ee8d6ea0ebfa84a868e6a87f3fc560e2043285d9674
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • AnyDesk.exe
    .exe 8.0MB

AnyDesk.exe

  • SHA256 e0bb78dd82d1377c11e85ee8d6ea0ebfa84a868e6a87f3fc560e2043285d9674
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
53:91:33:fa:21:8b:68:b7:17:ed:95:f4:ec:bc:ff:5a:9b:d2:da:db:5d:1e:9e:7f:b6:48:fe:c7:ad:41:af:f7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=AnyDesk Software GmbH,O=AnyDesk Software GmbH,L=Stuttgart,ST=Baden-Württemberg,C=DE
Digest
b8:f5:8d:79:1b:b8:23:2e:08:6e:bf:ca:5f:9b:ec:e7:78:8e:d0:0b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=AnyDesk Software GmbH,O=AnyDesk Software GmbH,L=Stuttgart,ST=Baden-Württemberg,C=DE
Minor OS version
1
Major OS version
5
Entry point
13151
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Gitlab-Runner\builds\T4hxUfUPM\0\anydesk\anydesk\release\app-32\win_loader\Static\AnyDesk.pdb