idm[.]6[.]41[.]11[.]Silent[.]kuyhAa[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

idm.6.41.11.Silent.kuyhAa.zip
Size

13.9MB
MD5

73daa5bb600c5f6472dbd3a50e291032
SHA1

ac25aaf994a30367cc0d9942db57b71d718bd400
SHA256

0351069209f52fc99ba163f0a735c3421296257f5534a06d48387f830521cc9d
SHA512

d04cf14fca088e26b136ba7458c873dcb7d8fe3011093f7b7dfd62dc08c994239b7bd17434afc783cc28c2b3e7fb0e25fc02b50c4c3d9f8641def8291dee93e3
SSDEEP

393216:c+jHmWcdb5pyw9tjg2VD4nFYNNmOcI7PI3oecTL:FHmWaVhsAmOnw3Jcv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/idm.6.41.11.Silent.kuyhAa/Internet.Download.Manager 6.41.11.kuyhAa.exe

Files

idm.6.41.11.Silent.kuyhAa.zip
.zip
idm.6.41.11.Silent.kuyhAa/Cara Install Penting.png
.png
idm.6.41.11.Silent.kuyhAa/Internet.Download.Manager 6.41.11.kuyhAa.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idm.6.41.11.Silent.kuyhAa/KeyReg.reg
idm.6.41.11.Silent.kuyhAa/Penting !.txt
idm.6.41.11.Silent.kuyhAa/Settings.reg
idm.6.41.11.Silent.kuyhAa/VERYSILENT.url
idm.6.41.11.Silent.kuyhAa/_Silent Install.cmd
idm.6.41.11.Silent.kuyhAa/www.kuyhaa.me.url