Static task
static1
Behavioral task
behavioral1
Sample
HDTVtoMPEG2_v1.11.93/HDTVtoMPEG2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
HDTVtoMPEG2_v1.11.93/HDTVtoMPEG2.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
HDTVtoMPEG2_v1.11.93/新云软件.url
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
HDTVtoMPEG2_v1.11.93/新云软件.url
Resource
win10v2004-20231215-en
General
-
Target
055451f419cccdb111188deea7ac60c4
-
Size
263KB
-
MD5
055451f419cccdb111188deea7ac60c4
-
SHA1
307b03055823e5dd171479478b2e29583192ee05
-
SHA256
eeed5ee959347d0aa158fb5f2509f5701871f34a972eeab4ff0e22404fe78d45
-
SHA512
48469fbe725df6c6c95dc5f26fec90d1d310d7628e7de3ced3e20e6a7e2a9d66641e4724b36bfb1e162477b6ded1a36b3689520388c7580b7962272902c630a7
-
SSDEEP
6144:V7CaVLnfGI+5cJm6FgwLD4qm9uzpL35lQ/+OehrN:V7CyLeI+IhFgwgqm9SB5BD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/HDTVtoMPEG2_v1.11.93/HDTVtoMPEG2.exe
Files
-
055451f419cccdb111188deea7ac60c4.rar
-
HDTVtoMPEG2_v1.11.93/HDTVtoMPEG2.exe.exe windows:4 windows x86 arch:x86
e424bc85a53aa86fb5ba552dc3c8bd47
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
FileTimeToLocalFileTime
GetFileAttributesA
GetFileTime
GetTickCount
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
GetFileInformationByHandle
PeekNamedPipe
GetFileType
GetConsoleCP
GetConsoleMode
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
ExitThread
CreateThread
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RaiseException
ExitProcess
SetStdHandle
HeapSize
HeapDestroy
HeapCreate
GetStdHandle
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
SetHandleCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetEnvironmentVariableA
FileTimeToSystemTime
GetOEMCP
GetCPInfo
GlobalFlags
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
InterlockedDecrement
GetModuleFileNameW
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
WriteFile
GetThreadLocale
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
GetCurrentProcessId
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
LoadLibraryA
lstrcmpW
GetModuleHandleA
GetProcAddress
GetVersionExA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MulDiv
SetLastError
OutputDebugStringA
Sleep
WaitForSingleObject
IsProcessorFeaturePresent
GetDiskFreeSpaceA
GetModuleFileNameA
GetFileSize
CreateFileA
SetFilePointer
ReadFile
FindResourceA
LoadResource
LockResource
SizeofResource
InitializeCriticalSection
lstrcpynA
WritePrivateProfileStringA
GetPrivateProfileStringA
SetCurrentDirectoryA
GetCurrentDirectoryA
DeleteCriticalSection
lstrlenA
CompareStringW
CompareStringA
CloseHandle
EnterCriticalSection
LeaveCriticalSection
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
VirtualFree
InterlockedExchange
user32
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
UnregisterClassA
RegisterClipboardFormatA
PostThreadMessageA
SetCursor
GetMessageA
TranslateMessage
ValidateRect
PostQuitMessage
GetWindowThreadProcessId
GetCursorPos
WindowFromPoint
GetDesktopWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
DrawTextExA
TabbedTextOutA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetRect
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsWindow
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
GetMenu
PostMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
ScreenToClient
EqualRect
MessageBoxA
CharUpperA
CopyRect
GetDlgCtrlID
DefWindowProcA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetMenuState
GetMenuItemID
IsRectEmpty
CopyAcceleratorTableA
CharNextA
LoadCursorA
GetSysColorBrush
DestroyMenu
SetWindowContextHelpId
MapDialogRect
SetWindowsHookExA
PtInRect
SendMessageA
GetClientRect
InvalidateRect
GetFocus
GetParent
EnableWindow
ReleaseDC
GetDC
GetWindowLongA
CallWindowProcA
SetWindowLongA
DrawFocusRect
DrawTextA
DrawFrameControl
GetSysColor
UpdateWindow
SetTimer
KillTimer
SetCapture
ReleaseCapture
DrawIcon
AppendMenuA
GetSystemMenu
IsIconic
GetWindowRect
RedrawWindow
GetActiveWindow
LoadIconA
GetSystemMetrics
GetSubMenu
GetMenuItemCount
GrayStringA
gdi32
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreateBitmap
GetStockObject
SetWindowExtEx
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutA
RectVisible
PtVisible
CreatePen
GetTextMetricsA
GetWindowExtEx
GetViewportExtEx
DeleteObject
MoveToEx
LineTo
SetMapMode
SetStretchBltMode
RestoreDC
SaveDC
GetObjectA
GetClipBox
GetDeviceCaps
StretchDIBits
SetBkColor
SetTextColor
ExtTextOutA
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegCloseKey
shell32
SHBrowseForFolderA
SHGetMalloc
DragFinish
DragQueryFileA
SHGetPathFromIDListA
shlwapi
PathStripPathA
PathFileExistsA
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathRemoveFileSpecA
PathIsUNCA
oledlg
ord8
ole32
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoDisconnectObject
CLSIDFromString
CoRevokeClassObject
CoTaskMemAlloc
CoTaskMemFree
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CLSIDFromProgID
oleaut32
VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
SysFreeString
SysAllocStringByteLen
VariantCopy
SysAllocString
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
LoadTypeLi
VariantClear
Sections
.text Size: 356KB - Virtual size: 353KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
HDTVtoMPEG2_v1.11.93/HDTVtoMPEG2.exe.manifest.xml
-
HDTVtoMPEG2_v1.11.93/新云软件.url.url