Static task
static1
Behavioral task
behavioral1
Sample
Microsoft OneDrive.exe
Resource
win10-20240611-en
Behavioral task
behavioral2
Sample
Microsoft OneDrive.exe
Resource
win10v2004-20240709-en
General
-
Target
Microsoft OneDrive.exe
-
Size
32KB
-
MD5
b66cc731a34651432dca728897d84047
-
SHA1
d08c0f5743e9185e1e94562eac54538212ac689b
-
SHA256
365c41ac5cd5e615202376c2a67c1a0430e94210b22286a7bfb2c211d8487b8a
-
SHA512
e24c0de7c900a602b65ab9a13ec125be1dfa6d5b7a080ff96b3a8ed6384389921e96e8a3d875fe0978d5178fb865759a35f2370d792bd83c23058c43a5c40ec2
-
SSDEEP
768:2YD1aclJpZKYsskkiZsd3qqXzBeGRRLur0VY9Is:2YD1NzLkZkqjOa9x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Microsoft OneDrive.exe
Files
-
Microsoft OneDrive.exe.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.voik1 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.voik2 Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE