f6342b7e55ce9dfcb123acba32251f8d3f0688c11d9f75249193e935dda0ae14 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6342b7e55ce9dfcb123acba32251f8d3f0688c11d9f75249193e935dda0ae14
Size

301KB
MD5

6a6172cd39a42c2970198c84e68e84a0
SHA1

b922f571f099c0507e03a12cae8082ed28534148
SHA256

f6342b7e55ce9dfcb123acba32251f8d3f0688c11d9f75249193e935dda0ae14
SHA512

b22b03d179d6e5dd7f2b3ed2606c68b97da8fbd5b30b5f0fb9cc2ecedead59bad648837c0aa8d7506391521bb4e6e41d14975fe53f720b88bb6df0d79b0cb60a
SSDEEP

6144:IF2s+NWtNdLQePg04ueMYPbbO6m1MpHSbuEVUIBtbM9r2YwFc:4jwWtNR9Pg04vMYPbxmF9lM9r2YZ

Score

9^/10

Malware Config

Signatures

Molebox Virtualization software 1 IoCs

Detects file using Molebox Virtualization software.

resource	yara_rule
sample	molebox

Files

f6342b7e55ce9dfcb123acba32251f8d3f0688c11d9f75249193e935dda0ae14
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 436B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 274KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ