Behavioral task
behavioral1
Sample
PostalReceipt.exe
Resource
win7-20240903-en
General
-
Target
1726d8d3f7d36420787c11aa8067b4d4_JaffaCakes118
-
Size
37KB
-
MD5
1726d8d3f7d36420787c11aa8067b4d4
-
SHA1
94cc1d633c7905675b017c3cfc9aa5838e07d3da
-
SHA256
4651e895ce6ee9ec68fc810e504dcf3ce5584997f2258a7ff4e95f4e9fa87b98
-
SHA512
0d1b7ec2c50fd560c807d6de0367607faf82db60de600b42c708e36c376cf24dc1df8bbdb702db2335125cb89703e675b06d35913f86d9f7e7c275f1a907292a
-
SSDEEP
768:QnD1gg6Au2lJLVahmOc7nxuSyRmaV2fG/gOfZB2JZ:QD2ZAu2fV4XIngF8XfGK
Malware Config
Signatures
-
resource yara_rule static1/unpack001/PostalReceipt.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PostalReceipt.exe
Files
-
1726d8d3f7d36420787c11aa8067b4d4_JaffaCakes118.zip
-
PostalReceipt.exe.exe windows:9 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE