Trojan-Ransom[.]Win32[.]Cidox[.]cil-481f0e76553b2aaa9aa69eb14a1a3a4ba683f31c07ab8ec671715bb2d1407cb7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Trojan-Ransom.Win32.Cidox.cil-481f0e76553b2aaa9aa69eb14a1a3a4ba683f31c07ab8ec671715bb2d1407cb7
Size

42KB
MD5

0a7c7be6450fbcba4e3e367274af272a
SHA1

0514fe7bec50d1580138793d53476134a25f598f
SHA256

481f0e76553b2aaa9aa69eb14a1a3a4ba683f31c07ab8ec671715bb2d1407cb7
SHA512

4182e31cc718cc60365cddd73ee1bd0c656d50e2b234ac9b1cd3b47fe1b91e95b114216262872d553110c2312f95b49afe8454beec4b8c82dc4ca8cb2db3c923
SSDEEP

768:B1CSXkXihXcY1WS3bHbP7F+qbeRjxPo5e7rb5PyBL1o9gAia:HCSUyh4SHbcZRoSrbgboeAi

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Cidox.cil-481f0e76553b2aaa9aa69eb14a1a3a4ba683f31c07ab8ec671715bb2d1407cb7
.dll windows x86

de91df502054d2e0812d8bd5f4505923

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
CloseHandle
GetTickCount
GetStdHandle
QueryPerformanceCounter
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ