6e5ca3b2f44da5395e4c03616388e43e7339ee0d8b17c39f08b20f19d656458e

General

Target

6e5ca3b2f44da5395e4c03616388e43e7339ee0d8b17c39f08b20f19d656458e
Size

317KB
MD5

2212753967a0beb4afe6c443e250aaa0
SHA1

f60e2dcbdab9fbc649241c18ba04d813f41c6da6
SHA256

6e5ca3b2f44da5395e4c03616388e43e7339ee0d8b17c39f08b20f19d656458e
SHA512

1ad84370ea884adc3c94dd1b63f8d4bf951dea5e3a56e55cfe33d26d8f11574e7d737099e8c5520adb8b6cef2ecfd9fdf4c1e5dfdce26a624862103cc39b8893
SSDEEP

6144:nhL65jZIzuNvdNQz757GS1kWZ23vN/pAIX3cKZmnXJhK3Wh:cjwIdeHr1kWo3NSAynZhKGh

Score

9^/10

Malware Config

Signatures

Molebox Virtualization software 1 IoCs

Detects file using Molebox Virtualization software.

resource	yara_rule
sample	molebox

Files

6e5ca3b2f44da5395e4c03616388e43e7339ee0d8b17c39f08b20f19d656458e
.exe windows x86

71527b2fc37e79eb8f99895bbe9942a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegOpenKeyW
RegQueryValueExA
RegQueryValueW
RegSetValueA
RegSetValueExW

kernel32

CloseHandle
CreateFileW
ExitProcess
GetFileSize
InitializeCriticalSection
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WriteFile

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
clock
free
localtime
malloc
memcpy
mktime
signal
sprintf
sscanf
strcpy
strftime
time
wcscpy

user32

MessageBoxW

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 232KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 2KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

71527b2fc37e79eb8f99895bbe9942a7

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

user32

Sections

.text Size: 17KB - Virtual size: 16KB

.data Size: 512B - Virtual size: 152B

.idata Size: 1KB - Virtual size: 1KB

.rdata Size: 2KB - Virtual size: 1KB

.bss Size: - Virtual size: 232KB

.tls Size: 2KB - Virtual size: 16B

.rsrc Size: 2KB - Virtual size: 76KB

.text
Size: 17KB - Virtual size: 16KB

.data
Size: 512B - Virtual size: 152B

.idata
Size: 1KB - Virtual size: 1KB

.rdata
Size: 2KB - Virtual size: 1KB

.bss
Size: - Virtual size: 232KB

.tls
Size: 2KB - Virtual size: 16B

.rsrc
Size: 2KB - Virtual size: 76KB