Trivial fuzzing of molebox archives revealed a heap overflow decrypting the packed image in moleboxMaybeUnpack. This vulnerability is obviously exploitable for remote arbitrary code execution as NT AUTHORITY\SYSTEM.
9006764eb2a662f1500a7aa2992e20fb3ecac298b87aed2a54131e2f36307888