Static task
static1
Behavioral task
behavioral1
Sample
fe6151600f1a12d2d48ed26e24ebd704bf42902eb9dbcda8a39f2ffd2ba72e1e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fe6151600f1a12d2d48ed26e24ebd704bf42902eb9dbcda8a39f2ffd2ba72e1e.exe
Resource
win10v2004-20221111-en
General
-
Target
fe6151600f1a12d2d48ed26e24ebd704bf42902eb9dbcda8a39f2ffd2ba72e1e
-
Size
66KB
-
MD5
2fcc0c2c0e104475700580e913133a48
-
SHA1
930bae36f572962604386b9a08a97e6f1fd89af9
-
SHA256
fe6151600f1a12d2d48ed26e24ebd704bf42902eb9dbcda8a39f2ffd2ba72e1e
-
SHA512
afb3327dd2676bd1b945b9f7955c27d5b6d6739c3dafd5388a7314cbc124b93c5799e6b8a2dd7b43edb4d8592469393e1ed42ffb40c8a39b6fe0a30831cb28d2
-
SSDEEP
768:ZP60Z4VLiWjC9Iot1c5nZfHMY5/scnpWoDhTab0AC1qh+6Zvtid6U:YVL/Bote5dP3hTVA95tmd
Malware Config
Signatures
-
Molebox Virtualization software 1 IoCs
Detects file using Molebox Virtualization software.
resource yara_rule sample molebox
Files
-
fe6151600f1a12d2d48ed26e24ebd704bf42902eb9dbcda8a39f2ffd2ba72e1e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 436B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE