mws-file-static-report
Get static analysis result of the analyzed file from malwares.com
mws-file-static-report hash=HASH [profile=PROFILE] [raw=t]
- profile=PROFILE
- Profile name of malwares.com
- hash=HASH
- MD5, SHA1, or SHA256 hex string
- raw=BOOL
- Specify 't' for raw response
Output Fields
Field | Type | Name | Description |
---|---|---|---|
profile | String | Connect profile | Profile name of malwares.com |
hash | String | Hash value | MD5, SHA1, or SHA256 value |
result_code | Integer | Result code | e.g. 1, 0 |
result_msg | String | Result message | e.g. Data exists |
api_version | String | API version | e.g. 2015072100 |
file_name | String | File name | e.g. EXPLORER.EXE |
file_version | String | File version | e.g. 10.0.19041.1889 (WinBuild.160101.0800) |
file_description | String | File description | e.g. Windows Explorer |
company_name | String | Company name | e.g. Microsoft Corporation |
internal_name | String | Internal name | e.g. explorer |
product_name | String | Product name | e.g. Microsoft Windows Operating System |
product_version | String | Product version | e.g. 10.0.19041.1889 |
md5 | String | MD5 | e.g. 7A413DDD10E81ADB6BB5D5E38F399D08 |
sha1 | String | SHA1 | |
sha256 | String | SHA256 | |
format_type | String | Format type | e.g. pe |
subsystem | String | Subsystem | e.g. 0x2(WINDOWS) |
image_base | String | Image base | e.g. 0x140000000 |
characteristics | String | Characteristics | e.g. 0x22(LARGE_ADDRESS_AWARE, EXECUTABLE_IMAGE) |
pe_file_type | String | PE file type | e.g. PE64 |
stored_checksum | String | Stored checksum | e.g. 0x4EB54A |
file_alignment | String | File alignment | e.g. 0x200 |
entrypoint | String | Entrypoint | e.g. 0xA1DC0 |
section_alignment | String | Section alignment | e.g. 0x1000 |
sections | List | Sections | Elements with section_name, raw_data_offset, raw_data_hash properties. |
imports | List | Imports | Elements with dll_name and functions properties. |
strings | List | Strings | Elements with offset, charset, pattern, string properties. |
raw | String | Raw data | Original HTTP response |