37be58eb46ee35db2aacea9f475cc60c

General

Target

37be58eb46ee35db2aacea9f475cc60c
Size

721KB
MD5

37be58eb46ee35db2aacea9f475cc60c
SHA1

ec0f99f6cad388769776269afbabaf16ff53c7df
SHA256

dda92eb1d48662c43a6e32c53830424d4847f243d4001bdd2a66a749d4da7719
SHA512

350e1d5843296ddfb4f5e23fd1734e328aa1a20686e82416a2554870129411e981a11ad01aa4af281fb86d651a78f8fea9b8f7ffb507b678c2b2e01496e3d43e
SSDEEP

12288:NK/aa9tot60lWK7OvDZsPjwO3DRurGK0YTUgfasQUczczAL:q3ysvczrL

Score

7^/10

Malware Config

Signatures

Molebox Virtualization software 1 IoCs

Detects file using Molebox Virtualization software.

resource	yara_rule
sample	molebox

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37be58eb46ee35db2aacea9f475cc60c

Files

37be58eb46ee35db2aacea9f475cc60c
.exe windows:4 windows x86 arch:x86

a3ea1c4acd87e86d32ae23629f61bcc2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CloseServiceHandle
CreateServiceA
OpenSCManagerA
OpenServiceA
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceA
StartServiceCtrlDispatcherA

kernel32

AddAtomA
CreateEventA
CreateFileA
ExitProcess
FindAtomA
GetAtomNameA
GetModuleFileNameA
SetUnhandledExceptionFilter
Sleep
WriteFile

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
_strdate
_strtime
abort
atexit
exit
free
malloc
memset
signal
strcat
strcmp
strcpy
strlen

user32

GetAsyncKeyState
GetForegroundWindow
GetKeyNameTextA
GetWindowTextA
MapVirtualKeyA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 272B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_MEM_DISCARDABLE

.stabstr
Size: 649KB - Virtual size: 648KB

IMAGE_SCN_MEM_DISCARDABLE

Sharing

General

Malware Config

Signatures

Files

a3ea1c4acd87e86d32ae23629f61bcc2

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

user32

Sections

.text Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 208B

.rdata Size: 512B - Virtual size: 288B

.bss Size: - Virtual size: 272B

.idata Size: 1KB - Virtual size: 1KB

.stab Size: 48KB - Virtual size: 48KB

.stabstr Size: 649KB - Virtual size: 648KB

.text
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 208B

.rdata
Size: 512B - Virtual size: 288B

.bss
Size: - Virtual size: 272B

.idata
Size: 1KB - Virtual size: 1KB

.stab
Size: 48KB - Virtual size: 48KB

.stabstr
Size: 649KB - Virtual size: 648KB