ccfcd3506038186187d2190d0e1ee16663d7e5952daac634f6de9659eed24dbc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ccfcd3506038186187d2190d0e1ee16663d7e5952daac634f6de9659eed24dbc
Size

50KB
MD5

085d156bc1676fbf136be72e12964282
SHA1

d1987e251eff6b936f98d6d99dc8f66e8c460730
SHA256

ccfcd3506038186187d2190d0e1ee16663d7e5952daac634f6de9659eed24dbc
SHA512

8ad8163d395836e44f6647c474887c90ed9c59243010bf70460db5504ebeb3c884ae68b4a3d03dbe2af61e4dad7c58631d038cd71caea55e5007f0bc9428ebd2
SSDEEP

768:TW/P6ritNefk5SSjAJfbFNcnHugK/z4I9G7oQg:00i7efkGJzCPqz4zoQg

Score

9^/10

Malware Config

Signatures

Molebox Virtualization software 1 IoCs

Detects file using Molebox Virtualization software.

resource	yara_rule
sample	molebox

Files

ccfcd3506038186187d2190d0e1ee16663d7e5952daac634f6de9659eed24dbc
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 436B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ