Trojan-Ransom[.]Win32[.]Cidox[.]ciq-ea31694cc9731d90d86003404f358d5b96d7205df9b4e394be26d8e4358ac364 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Trojan-Ransom.Win32.Cidox.ciq-ea31694cc9731d90d86003404f358d5b96d7205df9b4e394be26d8e4358ac364
Size

42KB
MD5

6da5053ac10103cdce47e81f05d661da
SHA1

61ad83c96b2a1c7b2a06246d537f19c082e8f0ef
SHA256

ea31694cc9731d90d86003404f358d5b96d7205df9b4e394be26d8e4358ac364
SHA512

21784cb071bda87e2916dfb1b8259f709a16eea592629874965933932b36a43b6ab858896799a6bc9253a87943d77b1e912e5b8eae18bb7b27c416763259a6c9
SSDEEP

768:rMUsRHwxk9yvgiFKJQcnJc//31zycCO5KMA8tgyMb1o9pb:rM7HlEIiFKJc/P4cCO55Awnio3

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Cidox.ciq-ea31694cc9731d90d86003404f358d5b96d7205df9b4e394be26d8e4358ac364
.dll windows x86

ef9206d7e50adf8af61984a903ed5943

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetCurrentThreadId
CloseHandle
GetTickCount
GetStdHandle
QueryPerformanceCounter
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ