e1b957734bb4df5de0623703abb5ef939d3dd0cf741ae76484e2efa87d33c949 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1b957734bb4df5de0623703abb5ef939d3dd0cf741ae76484e2efa87d33c949
Size

253KB
MD5

a031750d5ae023b3a82a8c22296b9e10
SHA1

b924649580cb1e4ee03f5c431be82c0014bad313
SHA256

e1b957734bb4df5de0623703abb5ef939d3dd0cf741ae76484e2efa87d33c949
SHA512

2388aba5b5f1c22ca4b0f8afdf50c43a3c4708f6caae72f3a90aa3da73d89d4ca880d0fd19b3d538824467d0c3d87dcb33adcb85328751b4eb10e41b79c5ecfd
SSDEEP

3072:JQrGI/P0xPwYFRwxl6vUv6b5FO2vkJXqcqW/+KoUzSdzZqaQHRzXi5L4JS2plsXA:PI/P0OYFGWb5FOLhqi+MS5wa+dSR0q6Z

Score

9^/10

Malware Config

Signatures

Molebox Virtualization software 1 IoCs

Detects file using Molebox Virtualization software.

resource	yara_rule
sample	molebox

Files

e1b957734bb4df5de0623703abb5ef939d3dd0cf741ae76484e2efa87d33c949
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 436B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 221KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE