4ef7af80652814ab8d1cdd0d2f7cd0e74bda7ed006de7b8b8e197f2803e12ae6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ef7af80652814ab8d1cdd0d2f7cd0e74bda7ed006de7b8b8e197f2803e12ae6
Size

301KB
MD5

2ef6ce38202b0621a482c2a200ee9160
SHA1

c2a8fe5f09edc600ab708577ec754ecf6fc8f5ca
SHA256

4ef7af80652814ab8d1cdd0d2f7cd0e74bda7ed006de7b8b8e197f2803e12ae6
SHA512

a4d59021be5a9dc1d1be8d51cece91f6b365759d85a79cf0bef209d53b308879b8ce8de85756275eb55e23e3d37e5026bc7fa987041db9087cb7b668ace7c0fc
SSDEEP

6144:yFm9SYRZ2/ipaNYPZ+iTZAc4zbmBvc6+r77RUnzQAn/+:imHRZ26UNOjOl/myJ7RzG+

Score

9^/10

Malware Config

Signatures

Molebox Virtualization software 1 IoCs

Detects file using Molebox Virtualization software.

resource	yara_rule
sample	molebox

Files

4ef7af80652814ab8d1cdd0d2f7cd0e74bda7ed006de7b8b8e197f2803e12ae6
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 436B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 274KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ