General

  • Target
    sqlquerytool-4.2.2.0.exe
  • Size 20.9MB
  • Sample260930-ev36bawere
  • SHA256 b60108e2794b41e5905dbdf6bb8d65cbd99e8f43009e3a2c9b6ced94dea3eef6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Inno Setup is an open-source installation builder for Windows applications. 1 IoCs

    Inno Setup installer

File Explorer

  • sqlquerytool-4.2.2.0.exe
    .exe 20.9MB

sqlquerytool-4.2.2.0.exe

  • IMPHASH e569e6f445d32ba23766ad67d1e3787f
  • SHA256 b60108e2794b41e5905dbdf6bb8d65cbd99e8f43009e3a2c9b6ced94dea3eef6
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Inno Setup is an open-source installation builder for Windows applications.

    Inno Setup installer

Digest
7c:42:41:e0:04:f6:84:67:bb:37:12:69:4d:8d:73:f7:3f:13:18:fc:cb:cd:b8:69:39:66:eb:c9:23:66:d6:58
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Active Database Software,O=Active Database Software,POSTALCODE=454001,STREET=d. 5 ofis 196\, ul. 250-Letiya Chelyabinska,L=Chelyabinsk,ST=Chelyabinskaya oblast,C=RU
Minor OS version
1
Major OS version
6
Entry point
745196
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI
PDB paths