I can't say for certain, but as it was microscopic (less than 400 bytes) I would say almost certainly in Assembler. Anything else I can think of that would attack MS SQL Server machines would be much more bloated.

Cheers