Behavioral task
behavioral1
Sample
utorrent.exe
Resource
win7-20230831-en
General
-
Target
utorrent.exe
-
Size
1.1MB
-
MD5
a1a4e96dd68e9233904b107cc2e9251f
-
SHA1
f4d83b6449630154dba0e6f5810ed1dc27b5adc4
-
SHA256
07822c21f439b2393310475a42c6f97db46f71caa7adc99d4a7ea9421d3fd962
-
SHA512
322d135c21d537a11737237a82358ff23d4436d50cbb50e54fc84e9a8bb3d40709a1a3de877bd0c1fcdea386f2817690b9379043b8ed3cbe3e93f34b0733e248
-
SSDEEP
24576:i5Zaptm/KI+LxMlXvg3FKZBVr4hvE9jersLVXn+U9ez+1dqeK:i5k80LxCXvZ3VEJExersdTfqeK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource utorrent.exe
Files
-
utorrent.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 754KB - Virtual size: 756KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bunndle Size: 133KB - Virtual size: 136KB
IMAGE_SCN_MEM_DISCARDABLE
.adknow Size: 100KB - Virtual size: 100KB
IMAGE_SCN_MEM_DISCARDABLE