General

  • Target
    livechatsupport.exe
  • Size 7.7MB
  • Sample260701-w1hv1ady21
  • SHA256 bfc1675ee1e358db8356f515aaded7962923e426aa0a0a1c0eddfc4dab053f89
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • livechatsupport.exe
    .exe 7.7MB

livechatsupport.exe

  • SHA256 bfc1675ee1e358db8356f515aaded7962923e426aa0a0a1c0eddfc4dab053f89
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
49:9b:51:86:aa:80:87:0f:ff:ee:5d:c8:77:54:9e:81:af:98:a0:35:ec:40:f7:dd:73:81:23:1d:cb:04:15:8b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=AnyDesk Software GmbH,O=AnyDesk Software GmbH,L=Stuttgart,ST=Baden-Württemberg,C=DE
Digest
82:46:57:e6:b7:2d:93:0c:8b:51:d3:18:eb:43:6d:e5:52:73:38:42
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=AnyDesk Software GmbH,O=AnyDesk Software GmbH,L=Stuttgart,ST=Baden-Württemberg,C=DE
Minor OS version
1
Major OS version
5
Entry point
13907
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Users\worker\workspace\AD_windows32\release\win_9.6.11\6141\anydesk\release\app-32\win_loader\AnyDesk.pdb