8775f471ae8169925099c8782edd81ee07cfc0cc0fd4475ca069dac2d771d65c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8775f471ae8169925099c8782edd81ee07cfc0cc0fd4475ca069dac2d771d65c
Size

288KB
MD5

7221faa433d1f4334d452d5def9590fc
SHA1

8f240a406856eb21c48034ef4b465d19bd81e808
SHA256

8775f471ae8169925099c8782edd81ee07cfc0cc0fd4475ca069dac2d771d65c
SHA512

3fc5b7d17cd6d6f641eb3534cb0d07811f2bfaa7951ddfa662627ec6265e10499e75c13b52bb07938c50c45f66ee3d708a762d8f39e25d254e16d777a87dcd9b
SSDEEP

6144:QI6ITDzo5nLjtGqYxzRWWd7AsJaWFdSh8Kd:145Xt1Ymu7AgaWo8

Score

9^/10

Malware Config

Signatures

Molebox Virtualization software 1 IoCs

Detects file using Molebox Virtualization software.

resource	yara_rule
sample	molebox

Files

8775f471ae8169925099c8782edd81ee07cfc0cc0fd4475ca069dac2d771d65c
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 512B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vxhsjo
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jhcgjq
Size: 255KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ilayiy
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE