sqlauncher2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

sqlauncher2.exe
Size

132KB
MD5

745cb728936ed04293d7cc7f42fc9dbe
SHA1

81aa6857c5dcfb63ca9d722dfa18f632f2578cd0
SHA256

4b5dd6a4d8e44bf24a903534cadf236f34b499f268db07cf8cea247397d6acfc
SHA512

f1d3b86abc753e177d943e3294151a796feb992fadde19fe14cdd2ed1d4fb0633d1fadc33afc28a50057cc00f29a24d94dd51566e26252a981613162bf44a4d3
SSDEEP

1536:UTv/JZMS+0K28joENnnOEMeC8HXYbU4w1ITeK4kCdNW3iA2fqLDzLRD53iAywW:a/JZ3+QYoENnnO/SXYb5lTuM3L/qb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sqlauncher2.exe

Files

sqlauncher2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\CD\C Sharp\SimpleQuakeLauncher2_GIT\SQL2\obj\Release\SQLauncher2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ