SQLi v[.]9[.]8[.]2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SQLi v.9.8.2.exe
Size

436KB
MD5

a403e5365cd755dd73da35fe8a021aa7
SHA1

79885100e8256e56c612cd43c81ccf0306fe86a9
SHA256

81bfdca10d2a97810bf3a34f3fd4a08634b45c854b1619eed30dec9ec941420a
SHA512

9160b539a7448250ce388c296d18693992276d0813257c8606e8ec32fdec4b92ab98cd526562e51c780a808206db00f79b5fbd4bc7e03c03f55c1e98d2151768
SSDEEP

768:oec4lj/CePn4QSE1a6BooEDeaOr/8kW3kLXh4LNA:o4lWePHSE1aOQDarkLUcA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SQLi v.9.8.2.exe

Files

SQLi v.9.8.2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 424KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ