IISRelease[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

IISRelease.exe
Size

29KB
MD5

68b439078f3c48bdcdee30b20c48317e
SHA1

dff9dcb8aaec047f507366cb68ec66ce36a036fb
SHA256

b3ad5d0cc957e0e3aca7727fc7adba3ca40ac927b73e9d8434a34d9fcf0fb966
SHA512

e0994c639559a24d0ccbd9976491e7bae2eddda39edc7b956f020103dea4ae21ff38b50732334bf7c32285043baff5ed0bf8e8f528d46a27c7aaaf03ba35fbe6
SSDEEP

768:gCz9DcNfOIKHW127rGHJynG333eBOZ31SxER4c:gghcNfOIKHW1iaK4Z3gqP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
IISRelease.exe

Files

IISRelease.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ