CIMCCYMIS_Client[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CIMCCYMIS_Client.exe
Size

625KB
MD5

b545f971d572dac1dd2482e93dc7a6ab
SHA1

20a817558509cf70df0bf03c8fc80e9ad9f8d3fd
SHA256

696ce23213006a7676eb481d021f8025ccaeb5bab79d70871fe2dbfc2a9edb60
SHA512

f94991aaccc63833d0541b33904e834dabf6ffcaf32fd51596816819bdc06a6242fac41b604ecfac54ed71293ecba6e8f5c37e6adca4395a90637367c51d1e64
SSDEEP

12288:QnXiIErgIzf9qCr7pTx/58dQq2PDu51ZZGcI6f4St5VgbgrPwl4NmI:M+rL9T7Nd58dQRPaaPOVgbgrPwl4NmI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CIMCCYMIS_Client.exe

Files

CIMCCYMIS_Client.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\CIMC-YS\CIMCCYMIS_Client\obj\x86\Debug\CIMCCYMIS_Client.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 613KB - Virtual size: 612KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ