postcard[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

postcard.exe
Size

84KB
MD5

a67d9ebe9bbef223b8ab6e1720aa4516
SHA1

cfdb7e0721f68632da13b865e4d302aaa3d39f4e
SHA256

b0f23bc277d3d96c5901b8be98ac03f21424e713da4e6721d5a63bcac3465a82
SHA512

8223607932dc63ef5a73029f0d5cf96b6e6093ef39550e4bf3d40eeec5212474759a395cfc6231caa8c0abd00b5a5a2308895790080cce69b8558de06bb2a1e0
SSDEEP

1536:G7bL6M4WcASRM4LQCDcl2oc6JFWEDRsLDjImatdW2Y+4Ol6afU:G/LNHcASRRQCQTzHoDsBtPhhfU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
postcard.exe

Files

postcard.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 64KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ