File Name | uTorria-a41745.exe |
File Type |
PE32+ executable (GUI) x86-64, for MS Windows
|
Scanner Version | 1.0.221.174 |
Database Version | 2025-07-20 15:00:26 UTC |
Malware family: Downloader
Hash Type | Value | Action |
---|---|---|
MD5 |
ee429361e192f5b601feb27836ac29bf
|
|
SHA1 |
91ee34fedd12e6b1aa1fcfda3331b739096d44c4
|
|
SHA256 |
a90695c385a22e24e13dec6f661b2f8d2d8a74aaacccd92ac81b6f52d2c8bdc8
|
|
SHA512 |
287837880d11d58b0e3e8c8e7d000708774a75d636f7d60fe51743b03e47e9e02519b5e65e7f151e8e640b7496392d9da6a0fc9efa4efa1694d42f26650e6df1
|
|
ImpHash |
3cfcc737a5d7a28aba9fa77ad74faa1f
|
Icon |
Hash: c3ff292cf1347e7620a0d807717657c2
Fuzzy: afe90b3e750200f3f74535eebeabfca2 dHash: 4771694f696d4d33 |
Image Base | 0x140000000 |
Entry Point | 0x141687b58 |
Compilation Time | 2025-06-20 14:50:07 |
Checksum | 0x020a3bf3 (Actual: 0x020a8a41) |
OS Version | 6.0 |
PEiD Signatures |
PE32+ executable (GUI) x86-64, for MS Windows
|
Digital Signature | OK |
Imports | 40 libraries |
Exports | 1 functions |
Resources | 12 Resources |
Sections | 8 Sections |
CompanyName | uTorria |
FileVersion | 1.0.1.15 |
LegalTrademarks1 | All Rights Reserved |
LegalTrademarks2 | All Rights Reserved |
OriginalFilename | uTorria.exe |
ProductName | uTorria |
ProductVersion | 1.0 |
Translation | 0x0409 0x04e4 |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
24,145,776 bytes | 24,145,920 bytes | 6.54 (Compressed) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
590DF462E7AC9166B0CBC6CA7BA17228 |
.rdata |
0x01708000 |
7,756,082 bytes | 7,756,288 bytes | 6.17 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
F7D70E7767DEBBA96C36DA9DC3B21E85 |
.data |
0x01e6e000 |
523,684 bytes | 379,904 bytes | 4.40 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
CBBDD0785EA0297226CC64255CA43715 |
.pdata |
0x01eee000 |
980,292 bytes | 980,480 bytes | 6.85 (Compressed) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
8CED0ADB845497CAD4E519AEB915DBC9 |
.qtmimed |
0x01fde000 |
341,244 bytes | 341,504 bytes | 8.00 (Packed/Encrypted) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ
|
DB30AB25D0C0FC611514234B64044155 |
_RDATA |
0x02032000 |
292 bytes | 512 bytes | 3.06 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
24A7112ED2353FC54A0B26225BD31CD5 |
.rsrc |
0x02033000 |
433,176 bytes | 433,664 bytes | 2.58 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
8682677F31249BD03C3AC4E8E8526A8E |
.reloc |
0x0209d000 |
160,976 bytes | 161,280 bytes | 5.48 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
AACDB6FC7A50BFB6AD8615043FEE6720 |
1 section(s) with high entropy (≥7.5) detected - possible packing/encryption
2 section(s) with elevated entropy (≥6.5) - possible compression
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
RT_ICON | 9 | 431,037 bytes | |
RT_GROUP_ICON | 1 | 132 bytes | |
RT_VERSION | 1 | 636 bytes | |
RT_MANIFEST | 1 | 638 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
OK
Gridinsoft has the capability to identify and eliminate Risk.Win64.Downloader.dd!c without requiring further user intervention.
Download Anti-MalwareFollow these steps to completely remove the threat from your system