Static task
static1
Behavioral task
behavioral1
Sample
uTorrent.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
uTorrent.exe
Resource
win10-20231020-en
General
-
Target
uTorrent.exe
-
Size
24.9MB
-
MD5
9a7ad587ebb1677287f7a9ffef2c1a20
-
SHA1
6c4ea120268888b821ce6b13d2965e64200075ba
-
SHA256
1e9a457e1a02eb67419d8b9347893b0634096c892d9edf38e8a231852ef3ba0a
-
SHA512
595b8401fc098428a25f75e072b8a98e01f043d02472c6d2eaccfcf45c5bd055a1fb58abf2dc0176ea4cc343f35107f6d411b66e1e43c23a43e2cae0d0266521
-
SSDEEP
98304:uSWRZML74SV5/tehLUI5YvY/hIf4n08IOeGq6Tt5r1MR:uLRZM/4a6XU40K1J5r1M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource uTorrent.exe
Files
-
uTorrent.exe.exe windows:4 windows x64 arch:x64
f724bf854d48d0d9304afe0d4a20398f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
LeaveCriticalSection
GetModuleHandleA
msvcrt
wcscpy
shell32
PathMakeUniqueName
advapi32
GetUserNameA
user32
GetDC
Sections
.text Size: - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pexe Size: - Virtual size: 5.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
.reloc Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 5KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE