Trojan-Ransom[.]Win32[.]Cidox[.]cik-3bfdce9eb29525d767d3c57530c8f43d964e606dfca992078c7a80555b2d3e6e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Trojan-Ransom.Win32.Cidox.cik-3bfdce9eb29525d767d3c57530c8f43d964e606dfca992078c7a80555b2d3e6e
Size

42KB
MD5

0b4c92eecaa5e4756d11ad16e1ec8145
SHA1

ed8e87843399371688d592e00cf6fc6f4c8b3a74
SHA256

3bfdce9eb29525d767d3c57530c8f43d964e606dfca992078c7a80555b2d3e6e
SHA512

9e4e7a52f0e7d947bf8c515f4e38018526a48cbaef7697a5df153003e3f29f191da58f792535f85e29f235abeda2007d0fc3ff473414c5b76efd5e1c3a83b715
SSDEEP

768:tVr/ZW1q/3FXANiT8TFt4xvh+7F0rIyUT1o9yia:tVrT9AoT8Tj4gF0DuoYi

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Cidox.cik-3bfdce9eb29525d767d3c57530c8f43d964e606dfca992078c7a80555b2d3e6e
.dll windows x86

de91df502054d2e0812d8bd5f4505923

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
CloseHandle
GetTickCount
GetStdHandle
QueryPerformanceCounter
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ