IIS安装工具[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

IIS安装工具.exe
Size

12KB
MD5

5892db06b3b5e9736918fe6cd34e3805
SHA1

132b451fafc218cf90620b22623038a6760626ff
SHA256

8dd2201dfa8b9b4cfb7851a80427a1599fbcd7d137eef055aaef0529c4d0f326
SHA512

2ca80e758eef78a394556943198c30e4d35ffb740484214a4bb81c637783f6e9ce43098249d20e96e60b9c1236b558c0ab8cfa747bb21b25727905f3de6c87a2
SSDEEP

192:YMxiZRhOWe6MWmfKp9QcAUCNVnIEf5VMoWyPCCzGvZxB1CfU:nxiZRhOWNmfKccAUCNxzPMojPMOs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
IIS安装工具.exe

Files

IIS安装工具.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ