CIMC[.]CYMIS[.]CM[.]Client[.]dll | Triage

Sharing

General

Target

CIMC.CYMIS.CM.Client.dll
Size

10.6MB
MD5

b0cd1faf40163ffec2d3a6546251656b
SHA1

3e102e40e7a2bd67a36cdfbed94f7871a803a290
SHA256

96fd530c06707e64ec922ff758214c220adc88c1eb3dec991e15ba75e41904d9
SHA512

dc1ffc70966235d815e5ce674578936cd3b8c2d2256c10bbf2b32c59a2428dae91a961f45592be3ea0817aee2808af1893135d7329466f64c6d9496cc9ec1f59
SSDEEP

49152:KCWURQbtOsxoC0yJPVViJw1ZVMDEaaY0JJE:KCWkOnJPriJ8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CIMC.CYMIS.CM.Client.dll

Files

CIMC.CYMIS.CM.Client.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\CIMC-YS\CIMC.CYMIS.CM.Client\obj\Debug\CIMC.CYMIS.CM.Client.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10.6MB - Virtual size: 10.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ