SecuriteInfo[.]com[.]PUA[.]uTorrent[.]9217[.]19611

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.PUA.uTorrent.9217.19611
Size

705KB
MD5

9a6f05ab019e9c9189b5599623ddd33e
SHA1

322d1dcb248535bc2a455b7e97a1b3f7373634b1
SHA256

f3ad57044ff8be6139df87cd5454379c63f5bc3a3120c774ae71fb4c6cd58f50
SHA512

cbf1475a0dbed4437f5c03866c1b0a8b4c12888e3b90d57793214d89776965ccf3ec76e0a6b2ea8f2566c8acbba59a7411ef3bff716429d231771b18a3ba93a2
SSDEEP

12288:iPCOrb2Xcg3VBRvZfA6wE9hNr7fJ8rXiOtcc7qM8:iP5rbkNDZPwE3KrXiOP7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.PUA.uTorrent.9217.19611

Files

SecuriteInfo.com.PUA.uTorrent.9217.19611
.exe windows:5 windows x86 arch:x86

3f5b1257870d4f7d46c486840f6d932c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Y:\jenkins-workspace\workspace\client-builder-product\ut_win\Build\Win32\Release\RemoteIEFrame.pdb

Imports

kernel32

CloseHandle
WideCharToMultiByte
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
CreateFileA
SetFilePointer
SetUnhandledExceptionFilter
ReadFile
CreateFileW
VirtualAlloc
GetModuleFileNameA
GetCurrentProcessId
DebugBreak
ExitProcess
VerSetConditionMask
CreateDirectoryW
WaitForSingleObject
SetEvent
GetModuleHandleW
GlobalAlloc
LoadLibraryW
TerminateThread
Sleep
TerminateProcess
VerifyVersionInfoW
CreateEventW
GetVersionExA
CreateThread
GetLocaleInfoW
ConnectNamedPipe
CreateNamedPipeW
WriteFile
GetOverlappedResult
DisconnectNamedPipe
FlushFileBuffers
GetFileSizeEx
SetLastError
GetCommandLineW
WriteConsoleW
SetStdHandle
OutputDebugStringW
HeapReAlloc
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetConsoleMode
GetConsoleCP
SetFilePointerEx
GetFileType
GetStdHandle
GetProcessHeap
GetOEMCP
GetACP
IsValidCodePage
HeapSize
GetModuleHandleExW
EnumSystemLocalesW
GetCurrentThreadId
GetModuleHandleA
ReadProcessMemory
GetTickCount
GetLastError
GetModuleFileNameW
GetDriveTypeW
LoadLibraryA
GetProcAddress
GetCurrentProcess
GetVolumeInformationA
LocalFree
GetUserDefaultLCID
IsValidLocale
LCMapStringW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
LoadLibraryExW
FreeLibrary
GetCPInfo
RtlUnwind
RaiseException
GetCommandLineA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
IsProcessorFeaturePresent
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetStringTypeW
EncodePointer
DecodePointer

user32

SetWindowPos
LoadCursorA
DefWindowProcW
MoveWindow
DispatchMessageW
ShowWindow
CreateWindowExW
EndPaint
DestroyWindow
GetMessageW
PostQuitMessage
PostMessageW
GetKeyState
FindWindowW
GetClientRect
BeginPaint
TranslateMessage
RegisterClassExW
InvalidateRect
GetWindowLongW
SetWindowLongW

shell32

SHGetSpecialFolderPathW
DragQueryFileW
DragFinish
CommandLineToArgvW

ole32

StgCreateStorageEx
CreateStreamOnHGlobal
OleSetContainedObject
OleInitialize
OleUninitialize
ReleaseStgMedium
OleCreate
CoTaskMemFree

oleaut32

VariantClear
SysStringLen
VariantInit
SysFreeString
DispGetParam
SysAllocString

shlwapi

PathFindExtensionW
PathCombineW
PathFileExistsW
PathRemoveFileSpecW
PathFindFileNameW

Sections

.text
Size: 250KB - Virtual size: 250KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3f5b1257870d4f7d46c486840f6d932c

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

shell32

ole32

oleaut32

shlwapi

Sections

.text Size: 250KB - Virtual size: 250KB

.rdata Size: 56KB - Virtual size: 55KB

.data Size: 10KB - Virtual size: 28KB

.rsrc Size: 1024B - Virtual size: 784B

.reloc Size: 14KB - Virtual size: 13KB

.text
Size: 250KB - Virtual size: 250KB

.rdata
Size: 56KB - Virtual size: 55KB

.data
Size: 10KB - Virtual size: 28KB

.rsrc
Size: 1024B - Virtual size: 784B

.reloc
Size: 14KB - Virtual size: 13KB