CIMCCYMIS_Client[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CIMCCYMIS_Client.exe
Size

625KB
MD5

aa333afe35b93b435eb140d9128cb9fc
SHA1

1437bfb1218b782e59c6f3ca50b1aec929a9699a
SHA256

e09034034adf18a99c76fbf9ebf2add4581501a2f3fd10e63df5d9e9abca1bb0
SHA512

950117bc233a6bdd4abc6da581b469352b91df9750a4d2fc8bb99fed8f25956a4e3c5c153224697672ed83d1010644bd2b0848cb57f76c21271858d745632101
SSDEEP

12288:+nXiIErgIzf9qCr7pTx/58dQq2PDu51ZZGcI6f4St5VgbgrPwl4NmI:m+rL9T7Nd58dQRPaaPOVgbgrPwl4NmI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CIMCCYMIS_Client.exe

Files

CIMCCYMIS_Client.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\CIMC-YS\CIMCCYMIS_Client\obj\x86\Debug\CIMCCYMIS_Client.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 613KB - Virtual size: 612KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ