SQLRecon[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SQLRecon.exe
Size

193KB
MD5

af1eac6cd1b838d1824b44441cd73e1e
SHA1

4326623a5f0460d487fbd439a3d9332f33fac04e
SHA256

934b069bb6d8e7b03747dc90a00c94df491d8e7b2d8955793c317ce9361b8e19
SHA512

80b3c649f911738cf2355476c3c76cc750213d1cef5876a222e7133094361c6ecf846a3903a1eb010d8683209e367e1e34ab538a6565f01eae750e6dfbe3f476
SSDEEP

3072:d+Pzaq2ttYCPtdbB8uf7WblbkWvKE0JjvN7:gPzaZttfa0JLN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SQLRecon.exe

Files

SQLRecon.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\tools\private\SQLRecon\SQLRecon\SQLRecon\obj\x64\Release\SQLRecon.pdb

Sections

.text
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ