CIMC[.]CYMIS[.]IService[.]dll | Triage

Sharing

General

Target

CIMC.CYMIS.IService.dll
Size

134KB
MD5

7c5b5cd8cc15b4b0383627ef5145cbae
SHA1

d3af2e64034f127292d277969993a87f0684e268
SHA256

8ea5cb3b8424eaa0b6daaf2876a0111eb5dd121033aacb2f8529753fa89a137e
SHA512

46d204558cb5206fbc728d3b1b39875f873ad0136ff7dba9f38bfbdd28b1b321dde4f72552d97394072deace7bd4da2d9679d7f368b4b1b900c52721fb2d5fc2
SSDEEP

3072:ek+45PkkAUeLQQD41m93Il2PLC55pzbjq56ttttttBBBBBBtcWeRN07xk2v+JxWE:7d55dbjG/vy54

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CIMC.CYMIS.IService.dll

Files

CIMC.CYMIS.IService.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\堆场项目\CIMC_YS\CIMC.CYMIS.IService\obj\Debug\CIMC.CYMIS.IService.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ