VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

Language
Server load
Server Load
sw_d.exe    Threatbook file behavior analysis report
Virscan.org multi-engine scan report
Behavior analysis report:         Habo file analysis
Basic Information
file name:sw_d.exe
file type:EXEx86
Submission time:2019-03-09 23:32:42
Threat level:malicious
MD5:47e1121922de5b78694369951b2ec26f
sha256:01d884594c3a03ad87e6bf2bdddedf3ecefe8a2d8adcb0bb762b20a57c4d2212
Document Threat Intelligence IOC Report
No intelligence IOC detected
Intelligence decision system
Undetected intelligence determination system
Network behavior report
domains:0
dns:0
http:0
udp:0
smtp:0
icmp:0
irc:0
hosts:0
Document release report
File release report not detected
File process number report
Process details:共分析了1个进程
Document behavior signature report
No file behavior report detected
Static information
Section name:.text
Virtual address:0x00001000
Physical address:0x00000000
Physical size:0x00000000
Section permissions:R-E
Section name:.textidx
Virtual address:0x00103000
Physical address:0x00000000
Physical size:0x00000000
Section permissions:R-E
Section name:CONST
Virtual address:0x001e7000
Physical address:0x00000000
Physical size:0x00000000
Section permissions:R-E
Section name:.rdata
Virtual address:0x001e8000
Physical address:0x00000000
Physical size:0x00000000
Section permissions:R--
Section name:.data
Virtual address:0x001f9000
Physical address:0x00000000
Physical size:0x00000000
Section permissions:RW-
Section name:.fnp_dir
Virtual address:0x0027d000
Physical address:0x00000000
Physical size:0x00000000
Section permissions:RW-
Section name:.fnp_mar
Virtual address:0x0027e000
Physical address:0x00000000
Physical size:0x00000000
Section permissions:RW-
Section name:.SSQ0
Virtual address:0x0027f000
Physical address:0x00000000
Physical size:0x00000000
Section permissions:R-E
Section name:.SSQ1
Virtual address:0x00282000
Physical address:0x00000400
Physical size:0x000d5400
Section permissions:RWE
Section name:.reloc
Virtual address:0x00358000
Physical address:0x000d5800
Physical size:0x00000200
Section permissions:R--
Section name:.rsrc
Virtual address:0x00359000
Physical address:0x000d5a00
Physical size:0x00000400
Section permissions:R--
import_hash:ff30b8dbfee95efa479b23e68091e63e
time_stamp:2015-04-01 22:22:08
entry_point_section:.SSQ1
entry_point_section:.SSQ1
image_base:0x400000
entry_point:0x354fea
name:RT_VERSION
language:LANG_ENGLISH
filetype:data
sublanguage:SUBLANG_ENGLISH_US
offset:0x00359058
size:0x00000320

About VirSCAN | Privacy Policy | Contact us | Links | Help VirSCAN
Translated by Keith Miller, United States
Powered By CentOSpol

京ICP备11007605号-12

pol

京公网安备 11010802020746号