30fdbf04ae5770fe790f908a6b3b8b48b62d4125bbfb824fa9a8608330df24ec | Triage

Sharing

General

Target

30fdbf04ae5770fe790f908a6b3b8b48b62d4125bbfb824fa9a8608330df24ec
Size

59KB
MD5

04cef349e10d48e1de683bb88497fdff
SHA1

74064616d2249206cba27b473cbae018c9442658
SHA256

30fdbf04ae5770fe790f908a6b3b8b48b62d4125bbfb824fa9a8608330df24ec
SHA512

4cacdbbe08e4f97ef283d96bb1c4b04f825429e7a759c2fe9cea569c5586c8adf74d8a6590c71e44e38bad5fc065614c0b42b27fc236999b865f7bdbdf00b3ea
SSDEEP

768:WCK7KcvX7TjnQbsvOzf4D98g9mZ1Qdo/HnvcUvQpLcF+yV6YiIneoTaM:VQ7esvF82sqo/0UvQtyV69IeoP

Score

9^/10

Malware Config

Signatures

Molebox Virtualization software 1 IoCs

Detects file using Molebox Virtualization software.

resource	yara_rule
sample	molebox

Files

30fdbf04ae5770fe790f908a6b3b8b48b62d4125bbfb824fa9a8608330df24ec
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 516B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

code
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ