General

  • Target
    Vendit-Remote-Front-PC.exe
  • Size 5.2MB
  • Sample260930-274zpswbld
  • SHA256 9d9dc5cc4d3621f9f4d85980b318a6252d81bf1b88b6b87b3a4756080214a7db
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Vendit-Remote-Front-PC.exe
    .exe 5.2MB

Vendit-Remote-Front-PC.exe

  • SHA256 9d9dc5cc4d3621f9f4d85980b318a6252d81bf1b88b6b87b3a4756080214a7db
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
24:82:f8:26:dd:a3:65:ff:d9:2d:f8:21:8c:49:b4:f3:97:c3:69:f9:03:79:a6:44:81:71:b2:9b:b8:2b:84:de
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=AnyDesk Software GmbH,O=AnyDesk Software GmbH,L=Stuttgart,ST=Baden-Württemberg,C=DE
Digest
e5:f1:c4:70:d4:a2:48:3f:57:c5:6f:f7:01:58:48:f8:c3:de:f6:e1
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=AnyDesk Software GmbH,O=AnyDesk Software GmbH,L=Stuttgart,ST=Baden-Württemberg,C=DE
Minor OS version
1
Major OS version
5
Entry point
7397
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Buildbot\ad-windows-32\build\release\app-32\win_loader\AnyDesk.pdb