7829b4ed5a3d7a7a5608c31c8deaf95aa99249aa6fe901d0f81bf8eb3620afab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7829b4ed5a3d7a7a5608c31c8deaf95aa99249aa6fe901d0f81bf8eb3620afab
Size

144KB
MD5

6b96496fa0fcd4ecdaab70affccb6e40
SHA1

84a50bef8de5c31ed47d877b7087d8395fd2f4cc
SHA256

7829b4ed5a3d7a7a5608c31c8deaf95aa99249aa6fe901d0f81bf8eb3620afab
SHA512

41642fc427808460f9a7381346bcf1bbf814a98e57d597083d48560143caadd256bec1c220eeaae45326b31fe1c98326254825249615c6ba85ae9e168a4c7cf3
SSDEEP

3072:6uE/fCEUB/URUYyBK2VGCVcSJURcrIZj4R9n6gvzB:SqEUWRpy8KrVcuURFZwnvF

Score

9^/10

Malware Config

Signatures

Molebox Virtualization software 1 IoCs

Detects file using Molebox Virtualization software.

resource	yara_rule
sample	molebox

Files

7829b4ed5a3d7a7a5608c31c8deaf95aa99249aa6fe901d0f81bf8eb3620afab
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 436B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE