OneDrive_1_04-10-2024[.]zip | Triage

Sharing

General

Target

OneDrive_1_04-10-2024.zip
Size

298KB
MD5

4cf4c0951f9d6cedafbd59bf09431caa
SHA1

d627e19792feb7fb643aad333e1a95decf525827
SHA256

8966d75ed6db3ffec7f811257f1d0f12cca6a5a5c160d6758b31d4edb3e14caf
SHA512

7a61f42d13cf6bcab4671bd602bfa8f0a0ee743e0ffbee53f6cf6bb984f21949a610d66d819bbee14de24cff888f22bf2c43f9ff48e71382833849d36607ea0d
SSDEEP

6144:nJro5UtGjv1Cro5UtGjv1nt9iro5UtGjv1I6Cq:J3tGRC3tGR63tGRb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Desktop Client (AT1700147 - Kelly Prod) - Installer.exe

Files

OneDrive_1_04-10-2024.zip
.zip
Desktop Client (AT1700147 - Kelly Prod) - Installer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

PDB Paths

D:\wamas\workspace-deployment\deployment\windows-apps\Installer\bin\Release\Installer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 209KB - Virtual size: 209KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
hosts