utoreentUD[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

utoreentUD.exe
Size

579KB
MD5

1d3ebbe9f1afe14303c7b51e24317d5b
SHA1

f23105bf107fff886fae740d8791fcd2615e2657
SHA256

70ad2dcc4e90244eda9bc794ffb83aa03f3d82da8e2e5504f8dc2502648030f5
SHA512

d3b9a125ed002adf42cb56c175daaa200a8d03d5120aa371e02e7e536a2323ae2f087cd6efee0a3dc9509198365955e9b491cca31dff0c3f136400a37446e3f2
SSDEEP

12288:LksCOE/OlgdVbPVle8CvCkXDRZ1cBG4iKcj+gM:LTEKgd+vrXDRAG4iK3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
utoreentUD.exe

Files

utoreentUD.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 576KB - Virtual size: 576KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ