Trojan-Ransom[.]Win32[.]Cidox[.]gen-509045e6640589ea07105f941abf4ed57d20c006e973833f7e41aecc91e51746 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Trojan-Ransom.Win32.Cidox.gen-509045e6640589ea07105f941abf4ed57d20c006e973833f7e41aecc91e51746
Size

48KB
MD5

25060421a1cc24715d516be7e1875bd1
SHA1

62d3ab1c732bf4f4636d3d7db17fece772805a71
SHA256

509045e6640589ea07105f941abf4ed57d20c006e973833f7e41aecc91e51746
SHA512

e94d6742b9d532476b404c7a72b550c0ac0dfdf14da4b705b05774de32de3cbbc97d8096da46afd9f90b427039293991248b97c55fe07813f71675ba46b432e8
SSDEEP

768://phsLGvMf8y957mLfkSr2LWryXLXo9HF7U://8GWZ9gkSyL7jopFY

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Cidox.gen-509045e6640589ea07105f941abf4ed57d20c006e973833f7e41aecc91e51746
.dll windows x86

9f8cfd43ddf43601dacd36a45f15f302

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
lstrcmpiA
GetProcAddress
LoadLibraryA
SetErrorMode
GetCommandLineA
GetSystemTimeAsFileTime
GetStringTypeW
GetStringTypeA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
RtlUnwind

Exports

Exports

tvAttrb
tvCalibrateDoc
tvGenConstant
tvPrepaireDoc
tvReportInit
tvSimpleDoc
tvSimpleGen
tvSituation1
tvSituation2

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ