579d9d9ae7f49e2a0cd43e61d65f89b2ebe2026097c2c4d378d569d10867ded5

General

Target
579d9d9ae7f49e2a0cd43e61d65f89b2ebe2026097c2c4d378d569d10867ded5
Size 480KB
Sample221014-l2tzjsadd5
SHA256 579d9d9ae7f49e2a0cd43e61d65f89b2ebe2026097c2c4d378d569d10867ded5
MD5 6d2ef4155874c6331e50b3c7f2b39110
SHA1 3508f3309f24d1f42f0b112972040245e36c02cc
SHA512 7340a3d319e79a5659cd3aeae5069926fb10cfc071bd73a7010509a918e1d18c590b1a1d8da197198d0295e2fa76dea66e6e4ad5767d423388cbd0d52c133c56
SSDEEP 12288:CRFj6MvPNFJv6NSd4NxcxzqX+Wub1WTxcpfAt1SZILqa5x:NMNFpRdocxzqX61V/wqOx
MD5 SHA1 SHA512 SSDEEP

Score

9^/10

Malware Config

Signatures

Molebox Virtualization software 1 IoCs

Detects file using Molebox Virtualization software.

resource	yara_rule
sample	molebox

File Explorer

579d9d9ae7f49e2a0cd43e61d65f89b2ebe2026097c2c4d378d569d10867ded5

.exe 480KB

579d9d9ae7f49e2a0cd43e61d65f89b2ebe2026097c2c4d378d569d10867ded5

IMPHASH e222b52ce40d7089492a8aca64948746
SHA256 579d9d9ae7f49e2a0cd43e61d65f89b2ebe2026097c2c4d378d569d10867ded5
MD5 6d2ef4155874c6331e50b3c7f2b39110
SHA1 3508f3309f24d1f42f0b112972040245e36c02cc
SHA512 7340a3d319e79a5659cd3aeae5069926fb10cfc071bd73a7010509a918e1d18c590b1a1d8da197198d0295e2fa76dea66e6e4ad5767d423388cbd0d52c133c56
SSDEEP 12288:CRFj6MvPNFJv6NSd4NxcxzqX+Wub1WTxcpfAt1SZILqa5x:NMNFpRdocxzqX61V/wqOx
MD5 SHA1 SHA512 SSDEEP

windows x86

Molebox Virtualization software

Detects file using Molebox Virtualization software.

Minor OS version

Major OS version

Entry point

4736

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

AddAtomA ExitProcess FindAtomA GetAtomNameA SetUnhandledExceptionFilter

msvcrt

__getmainargs __p__environ __p__fmode __set_app_type _assert _cexit _iob _onexit _setmode abort atexit free malloc memcpy memset signal strcpy strlen wcscpy

user32

BringWindowToTop CheckMenuItem CheckMenuRadioItem ClientToScreen CloseClipboard CopyRect CreateAcceleratorTableW CreateDialogIndirectParamW CreateMenu CreatePopupMenu CreateWindowExW DefWindowProcW DeferWindowPos DestroyAcceleratorTable DestroyCursor DestroyIcon DestroyMenu DrawEdge DrawFocusRect DrawStateW DrawTextW EnableMenuItem EnableWindow EnumClipboardFormats ExitWindowsEx FillRect GetActiveWindow GetCapture GetClassInfoW GetClassNameW GetClientRect GetClipboardData GetCursorPos GetDC GetDesktopWindow GetDlgItem GetFocus GetKeyState GetMenuItemCount GetMenuItemInfoW GetMenuState GetMessagePos GetParent GetSystemMetrics GetUpdateRect GetUpdateRgn GetWindowDC GetWindowLongW GetWindowRect GetWindowTextLengthW GetWindowTextW InflateRect InsertMenuW IsClipboardFormatAvailable IsWindow IsWindowEnabled IsWindowVisible IsZoomed KillTimer LoadBitmapW LoadCursorFromFileW LoadIconW LoadImageW ModifyMenuW MoveWindow MsgWaitForMultipleObjects OffsetRect OpenClipboard PostQuitMessage PtInRect RedrawWindow RegisterClipboardFormatW RegisterHotKey ReleaseCapture ReleaseDC RemoveMenu ScreenToClient ScrollWindow SetCapture SetCursor SetCursorPos SetFocus SetForegroundWindow SetWindowLongW SetWindowPos SetWindowTextW SetWindowsHookExW ShowCaret ShowCursor SystemParametersInfoW TranslateAcceleratorW TranslateMessage UnionRect UnregisterHotKey UpdateWindow WindowFromPoint

Name

.text

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

4KB

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

579d9d9ae7f49e2a0cd43e61d65f89b2ebe2026097c2c4d378d569d10867ded5

kernel32

msvcrt

user32