General

  • Target
    HandBrake-1.11.2-x86_64-Win_GUI.exe
  • Size 24.2MB
  • Sample260704-bp7prset3n
  • SHA256 6becb8e5a041941d5f2fd6fe83c66fc15b2b16190e2e79f5ad47eb4cd18df8cd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • HandBrake-1.11.2-x86_64-Win_GUI.exe
    .exe 24.2MB
  • $PLUGINSDIR/InstallOptions.dll
    .dll 15KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/ioSpecial.ini
    211B
  • $PLUGINSDIR/modern-wizard.bmp
    51KB
  • HandBrake.Worker.exe
    .exe 737KB
  • HandBrake.exe
    .exe 32.5MB
  • doc/COPYING
    17KB
  • hb.dll
    .dll 72.8MB
  • portable.ini.template
    1KB

HandBrake-1.11.2-x86_64-Win_GUI.exe

  • IMPHASH 573bb7b41bc641bd95c0f5eec13c233b
  • SHA256 6becb8e5a041941d5f2fd6fe83c66fc15b2b16190e2e79f5ad47eb4cd18df8cd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
cc:8b:81:e3:d9:83:af:4e:1f:07:44:03:7d:c4:29:f0:08:bb:6a:f3:34:88:b3:e3:b8:76:ab:ec:97:1a:be:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Scott Rae,O=Open Source Developer,L=Livingston,ST=West Lothian,C=GB
Minor OS version
0
Major OS version
4
Entry point
13655
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths