sqlcommand[.]exe[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

sqlcommand.exe.zip
Size

25KB
MD5

275ed92913650c8168a57086e7515962
SHA1

f396fb739570afc122c948bbea7e05933df0c88e
SHA256

5ef34ce4fc8598affa53c52dd4ae80480f6afa3fa669b13c47092a42bb7307f4
SHA512

e8e8e570a01ccab7fc62fa1674fc0e28df30779497522fc7eb5c75b652b023cb6c2d8a7558be924cf3a0851572d9f472602a5bae4643a66dcaf20579c3dd46e1
SSDEEP

384:HcvhmTPFqkWLQvuXmaw263VyJ98JEZhxtddbzuey71Jsk4B:80TPK0SmR9JEZTtddbGZJL4B

Score

1^/10

Malware Config

Signatures

Files

sqlcommand.exe.zip
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ