General

  • Target
    AnyDesk.exe
  • Size 8.0MB
  • Sample260827-cjtrdsyeph
  • SHA256 89e0a41a37d360d81bb0bfd89537dbbb3bdf45917adfe88ae3cb19d4f6b3c81e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • AnyDesk.exe
    .exe 8.0MB

AnyDesk.exe

  • SHA256 89e0a41a37d360d81bb0bfd89537dbbb3bdf45917adfe88ae3cb19d4f6b3c81e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f6:ce:8a:03:0c:0e:47:fb:65:f1:bc:7a:5a:74:1a:ab:32:d3:4c:9d:74:aa:20:65:0e:e8:df:74:19:f0:19:4b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=AnyDesk Software GmbH,O=AnyDesk Software GmbH,L=Stuttgart,ST=Baden-Württemberg,C=DE
Digest
05:e6:1f:8d:a0:61:65:73:1d:b8:d6:9d:64:73:e9:9c:2c:10:fc:0c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=AnyDesk Software GmbH,O=AnyDesk Software GmbH,L=Stuttgart,ST=Baden-Württemberg,C=DE
Minor OS version
1
Major OS version
5
Entry point
13151
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Gitlab-Runner\builds\XwtsjF1KC\0\anydesk\anydesk\release\app-32\win_loader\Static\AnyDesk.pdb