QuickSFV[.]EXE | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
QuickSFV.EXE
Size 101KB
Sample261006-vqcessbs8z
SHA256 a6371461da7439f4ef7008ed53331209747cba960b85c70a902d46451247a29c
MD5 4b1d5ec11b2b5db046233a28dba73b83
SHA1 3a4e464d3602957f3527727ea62876902b451511
SHA512 fcd653dbab79dbedca461beb8d01c2a4d0fd061fcfba50ffa12238f338a5ea03e7f0e956a3932d785e453592ce7bb1b8a2f1d88392e336bd94fb94a971450b69
SSDEEP 1536:lYfzZTBgMtgBKOX8eXDfRQpDm63htpmKvEZfn0X8u165J+S0YKxjy1:liVTBTgQOX80I59VJ165J+S0YKx+1
TLSH
T11FA37D527780C5F2E451267224E6E7724B3BB83503E556D3FB883E5A5E702C07A7E38A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
QuickSFV.EXE

File Explorer

QuickSFV.EXE

.exe 101KB

QuickSFV.EXE

IMPHASH a82b0a037498afa9656fbab30b7e5107
SHA256 a6371461da7439f4ef7008ed53331209747cba960b85c70a902d46451247a29c
MD5 4b1d5ec11b2b5db046233a28dba73b83
SHA1 3a4e464d3602957f3527727ea62876902b451511
SHA512 fcd653dbab79dbedca461beb8d01c2a4d0fd061fcfba50ffa12238f338a5ea03e7f0e956a3932d785e453592ce7bb1b8a2f1d88392e336bd94fb94a971450b69
SSDEEP 1536:lYfzZTBgMtgBKOX8eXDfRQpDm63htpmKvEZfn0X8u165J+S0YKxjy1:liVTBTgQOX80I59VJ165J+S0YKx+1
TLSH
T11FA37D527780C5F2E451267224E6E7724B3BB83503E556D3FB883E5A5E702C07A7E38A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

42716

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ImageList_Add ImageList_Create ord17 ImageList_GetImageCount

kernel32

FindNextFileA FindFirstFileA GetLastError CreateFileA WaitForMultipleObjects ReadFile MapViewOfFile CreateThread CreateEventA CreateSemaphoreA GetVersionExA WriteFile CreateDirectoryA GetCurrentDirectoryA SetEndOfFile SetFilePointer DeleteFileA WritePrivateProfileStringA GlobalUnlock GlobalLock FreeLibrary GetProcAddress LoadLibraryA GetPrivateProfileStringA VirtualAlloc InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection VirtualFree EnterCriticalSection WideCharToMultiByte GetFileTime Sleep ResetEvent SetCurrentDirectoryA GetTickCount GetSystemTimeAsFileTime GetModuleFileNameA HeapSize WriteConsoleW GetConsoleOutputCP WriteConsoleA LocalFree InitializeCriticalSectionAndSpinCount FindClose GetLocaleInfoA GetStringTypeW GetStringTypeA FlushFileBuffers GetConsoleMode GetConsoleCP SetStdHandle GetCurrentProcessId QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA LCMapStringW MultiByteToWideChar LCMapStringA ExitProcess HeapCreate HeapReAlloc RtlUnwind GetFileType GetStdHandle SetHandleCount GetCurrentThreadId SetLastError TlsFree TlsSetValue TlsAlloc TlsGetValue GetModuleHandleW IsValidCodePage GetOEMCP GetACP InterlockedDecrement InterlockedIncrement GetCPInfo HeapFree IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetStartupInfoA GetCommandLineA GetFileSize CreateFileMappingA ReleaseSemaphore UnmapViewOfFile SetEvent WaitForSingleObject CloseHandle LocalAlloc lstrlenA lstrcpyA GlobalAlloc GlobalFree HeapAlloc MoveFileA

user32

EndPaint SetWindowLongA DefWindowProcA WindowFromPoint KillTimer GetParent SetTimer GetDesktopWindow IsWindow SetWindowTextA MsgWaitForMultipleObjects PeekMessageA TranslateMessage DispatchMessageA LoadIconA RegisterClassA LoadMenuA SetWindowPlacement LoadBitmapA AppendMenuA ReleaseCapture EnableMenuItem GetCursorPos TrackPopupMenu SetCapture CallWindowProcA PostMessageA OpenClipboard EmptyClipboard SetClipboardData CloseClipboard GetSystemMenu CheckMenuItem DialogBoxParamA GetWindowPlacement MoveWindow GetSysColor MessageBeep InvalidateRect SetFocus GetMenu EndDialog GetSystemMetrics GetDlgItemTextA GetDlgItem ShowWindow DestroyWindow DestroyMenu wvsprintfA GetWindowRect SendMessageA wsprintfA MessageBoxA GetDC ReleaseDC CreateWindowExA GetClientRect LoadCursorA RegisterClassExA UnregisterClassA GetWindowLongA BeginPaint CreatePopupMenu

gdi32

MoveToEx LineTo SetBkColor TextOutA CreateFontA GetTextExtentPoint32A SetTextColor SetBkMode SelectObject ExtTextOutA DeleteObject GetStockObject

comdlg32

GetOpenFileNameA CommDlgExtendedError

shell32

SHBrowseForFolderA ShellExecuteA SHGetPathFromIDListA SHGetMalloc

ole32

CoUninitialize CoInitialize