CIMC[.]CYMIS[.]SYS[.]Client[.]dll | Triage

Sharing

General

Target

CIMC.CYMIS.SYS.Client.dll
Size

1.6MB
MD5

8d90c03941a3f25077785e6d90b28218
SHA1

4acba1c3a6d08ee61aaaca9f4ad4f9904117dec2
SHA256

783ed40870890449d395a1066423510cba07769d6ae6b3a0f0cd2f5e214c2ab4
SHA512

66b2e8195ddd0517fcc7b5d109a2de479b959b7c8e78109b8dc0a698190e2593c16d7027a2833f44f46d1f65813ebe0a4b78a56778d3ccf3bcff34921af0c147
SSDEEP

12288:xGTi2ncqTX55HBIlfNelZsdUbX4QZohEWNRf6F3TNrK9HvsC/z9l5Z:xKfbHBIatXCRC/K9HL35

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CIMC.CYMIS.SYS.Client.dll

Files

CIMC.CYMIS.SYS.Client.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\CIMC-YS\CIMC.CYMIS.SYS.Client\obj\x86\Debug\CIMC.CYMIS.SYS.Client.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ