Static task
static1
Behavioral task
behavioral1
Sample
9084f99206a8168d30505f6e6bd1e6c7089b30125102b82f432d08132999d8d2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9084f99206a8168d30505f6e6bd1e6c7089b30125102b82f432d08132999d8d2.exe
Resource
win10v2004-20220901-en
General
-
Target
9084f99206a8168d30505f6e6bd1e6c7089b30125102b82f432d08132999d8d2
-
Size
305KB
-
MD5
1f67a10a6e970f1374c629e76a53a6fe
-
SHA1
b8a962f9612ea2492eb4da10cad9f25ea24dfcc5
-
SHA256
9084f99206a8168d30505f6e6bd1e6c7089b30125102b82f432d08132999d8d2
-
SHA512
0a4678bb00ac2f411a7c5a55ad01bed0afc11e8f085f56b91b35c8ab0c2d4f87913dc3ce40c1059c4d88527a339088fe4442cae1b9fe60bc29a5f7ca7035a0d1
-
SSDEEP
6144:BDmXf4Xq1J4BdCSTvloO2j3kLtxS1ycUOWwn6Yj9Hf:xmXf46CnW3uchUOWwn/f
Malware Config
Signatures
-
Molebox Virtualization software 1 IoCs
Detects file using Molebox Virtualization software.
resource yara_rule sample molebox
Files
-
9084f99206a8168d30505f6e6bd1e6c7089b30125102b82f432d08132999d8d2.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 516B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 278KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE