OneDriveUpdater[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

OneDriveUpdater.exe
Size

271KB
MD5

31113f00145ab7d3773884f091407bed
SHA1

061d2d06ce1cabde79ee392645c3568df36fdf17
SHA256

189802cc7a8f5b8d260da48398835c9926b489fe0c1074e32dcf1fb3bad2e569
SHA512

8cf3e1760f72fa20a6046a9a1d46c2ddc869c0b3dcdff7a08a97c3c4155d7697391184c7da4ca0e33b956f63dea572a638fc3527548f28ab3f965366f7ee169e
SSDEEP

6144:30Zsou1/bXPDtA5h2EZ4LTbv1mV8/XdkpU7Ws8zNJf:30Zs71DpA5h2Xvsa1kpBs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
OneDriveUpdater.exe

Files

OneDriveUpdater.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\trydr\source\repos\OneDriveUpd\OneDriveUpd\obj\Release\OneDriveUpdater.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 202KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ