Static task
static1
Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.Cidox.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Trojan-Ransom.Win32.Cidox.dll
Resource
win10v2004-20220812-en
General
-
Target
Trojan-Ransom.Win32.Cidox.cil-371ef0b8d95efc2d411f6cb2e79b22ef0fbcd6478f557c087273a31ded4db963
-
Size
42KB
-
MD5
f432df607a7047971d9ee024f55403b0
-
SHA1
ccd0688658751cf5554b7a9c7431f50c79f2f46d
-
SHA256
371ef0b8d95efc2d411f6cb2e79b22ef0fbcd6478f557c087273a31ded4db963
-
SHA512
9689962b21f9aa45b24d03013a001338a9a48699813b3b097b273c6a82c4d239e72629c890cf12ac78c6b1c671920626faadc708c98bb62337fc1dad99e56b54
-
SSDEEP
768:JIeBifwffsmffJeP/cx0lqV9z0ACXE4Po5e7rb5PyBL1o9gAia:eeBWAfUPq9LBLpSrbgboeAi
Malware Config
Signatures
Files
-
Trojan-Ransom.Win32.Cidox.cil-371ef0b8d95efc2d411f6cb2e79b22ef0fbcd6478f557c087273a31ded4db963.dll windows x86
de91df502054d2e0812d8bd5f4505923
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
CloseHandle
GetTickCount
GetStdHandle
QueryPerformanceCounter
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ