Static task
static1
Behavioral task
behavioral1
Sample
HandBrake-1.6.1-x86_64-Win_GUI.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
HandBrake-1.6.1-x86_64-Win_GUI.exe
Resource
win10v2004-20230220-en
General
-
Target
HandBrake-1.6.1-x86_64-Win_GUI.exe
-
Size
22.0MB
-
MD5
980c74395955cc2667b36ab69d892a0f
-
SHA1
5b3fb6e13fa9f8fcba9b41b04f4ce8afe9f33ffd
-
SHA256
c0d7182df84741bfa5cfb116a9f66f1e4bbf19ba3cf79c04154b52af8bf20f7d
-
SHA512
69f6a30147510d55ed4afab8573b419c124626876b2818f9e3f2af25e3d5a34dd03a687d114ba06d8667a50923e68a0803ab5fe2ae8961f3f047d24b5c8db012
-
SSDEEP
393216:048sP5H9Oy1fwLI8rj2K1OHIGiz1LytF5pRgP6YF5y7Drh3rNn/oAWAh:0KPN9X1fcI2VERRC6YF5y73FN/jWAh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HandBrake-1.6.1-x86_64-Win_GUI.exe
Files
-
HandBrake-1.6.1-x86_64-Win_GUI.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ