General

  • Target
    AnyDesk.exe
  • Size 5.4MB
  • Sample260831-d1frjacq6t
  • SHA256 46accaafd6db2b6a98bac70d4c8257c612e307bf151adf6c8c877bb95dd9c536
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • AnyDesk.exe
    .exe 5.4MB

AnyDesk.exe

  • SHA256 46accaafd6db2b6a98bac70d4c8257c612e307bf151adf6c8c877bb95dd9c536
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e9:dc:fd:95:79:0b:6b:23:f2:b0:a7:3b:c6:76:e6:0a:e7:0e:63:4e:02:ec:84:95:f8:ad:2b:8d:6a:2a:e7:05
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=AnyDesk Software GmbH,O=AnyDesk Software GmbH,L=Stuttgart,ST=Baden-Württemberg,C=DE
Digest
4e:6a:20:0c:a9:74:24:f8:84:4e:60:96:78:1e:fb:41:77:70:1a:c0
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=AnyDesk Software GmbH,O=AnyDesk Software GmbH,L=Stuttgart,ST=Baden-Württemberg,C=DE
Minor OS version
1
Major OS version
5
Entry point
13907
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Gitlab-Runner\builds\T4hxUfUPM\0\anydesk\anydesk\release\app-32\win_loader\AnyDesk.pdb