8aa777950449600fe993f31d79378ab3f059b9f6952ddcf506bdd035ae96c0b1

General

Target

8aa777950449600fe993f31d79378ab3f059b9f6952ddcf506bdd035ae96c0b1
Size

466KB
MD5

968020d9a508c0e722734ea432c0e87c
SHA1

261e2a22c0205af6c123afbf7b678eebfb04d114
SHA256

8aa777950449600fe993f31d79378ab3f059b9f6952ddcf506bdd035ae96c0b1
SHA512

45df5f64bcaf39173b26e754baee713496dcdf1e5a92c401c67bd9d550b5a5461845aeca5c97f1e655d6b741004d0491e86a3bccfd7930c2a0f8c66301387592
SSDEEP

12288:l8NxjcknD8114mtwTYhU2c/4T063dIESmKdnx1iXflh:l8NxjcinmaTYh/n0SIJmQxE9h

Score

9^/10

Malware Config

Signatures

Molebox Virtualization software 1 IoCs

Detects file using Molebox Virtualization software.

resource	yara_rule
sample	molebox

Files

8aa777950449600fe993f31d79378ab3f059b9f6952ddcf506bdd035ae96c0b1
.exe windows x86

475a8ced403965cc9ab0286933a40a59

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegCreateKeyA
RegEnumValueW
RegOpenKeyExA
RegOpenKeyW
RegQueryValueExA
RegQueryValueW
RegSetValueA
RegSetValueW

kernel32

CloseHandle
CreateFileA
CreateFileW
ExitProcess
GetFileSize
InitializeCriticalSection
ReadFile
SetFilePointer
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
clock
free
localtime
malloc
memcpy
mktime
signal
sprintf
sscanf
strcpy
strftime
time
wcscpy

user32

MessageBoxW

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 311KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 2KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

475a8ced403965cc9ab0286933a40a59

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

user32

Sections

.text Size: 18KB - Virtual size: 18KB

.data Size: 512B - Virtual size: 124B

.idata Size: 1KB - Virtual size: 1KB

.rdata Size: 2KB - Virtual size: 1KB

.bss Size: - Virtual size: 311KB

.tls Size: 2KB - Virtual size: 12B

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 18KB - Virtual size: 18KB

.data
Size: 512B - Virtual size: 124B

.idata
Size: 1KB - Virtual size: 1KB

.rdata
Size: 2KB - Virtual size: 1KB

.bss
Size: - Virtual size: 311KB

.tls
Size: 2KB - Virtual size: 12B

.rsrc
Size: 1KB - Virtual size: 1KB