9647a04219d0dbf06e54da1667cbcb1ec5fd53cb9f19ce61515caacd50b7e8ab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9647a04219d0dbf06e54da1667cbcb1ec5fd53cb9f19ce61515caacd50b7e8ab
Size

300KB
MD5

06dad43fdfe1dc0cabe9f21e51de5275
SHA1

30307ed4775410c9cfae7c1e73b020c4481e14ba
SHA256

9647a04219d0dbf06e54da1667cbcb1ec5fd53cb9f19ce61515caacd50b7e8ab
SHA512

3c54c997b125e2949f0805201e1a20e9f55ee79dc88e26e6daec1ea75c4df48e6577b30059997241b34019610dbb0f9a10eadaf29dc0259f8af9a1fc86f95703
SSDEEP

6144:cm88no5uINK94nfxKZU8bIhe6bBz6yjs4IFQm7rBXvgLk:Y8o5s4U+OIrbBxsxum7rlvIk

Score

9^/10

Malware Config

Signatures

Molebox Virtualization software 1 IoCs

Detects file using Molebox Virtualization software.

resource	yara_rule
sample	molebox

Files

9647a04219d0dbf06e54da1667cbcb1ec5fd53cb9f19ce61515caacd50b7e8ab
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 436B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 274KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE