VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

Language
Server load
Server Load
登录&封禁查询.exe    Threatbook file behavior analysis report
Virscan.org multi-engine scan report
Basic Information
file name:登录&封禁查询.exe
file type:EXEx86
Threat level:malicious
MD5:13341005c1dbd38f429c468c4c598f65
sha256:bfdf77ea23eaa5cc6a1511fcee30938fc1a47a484f07347c64c8ba2cb9737f83
Document Threat Intelligence IOC Report
No intelligence IOC detected
Intelligence decision system
Undetected intelligence determination system
Network behavior report
domains:0
dns:0
http:0
udp:0
smtp:0
icmp:0
irc:0
hosts:0
Document release report
File release report not detected
File process number report
Process details:共分析了1个进程
Document behavior signature report
No file behavior report detected
Static information
Section name:.text
Virtual address:0x00001000
Physical address:0x00001000
Physical size:0x0010c000
Section permissions:R-E
Section name:.rdata
Virtual address:0x0010d000
Physical address:0x0010d000
Physical size:0x00039000
Section permissions:R--
Section name:.data
Virtual address:0x00146000
Physical address:0x00146000
Physical size:0x00014000
Section permissions:RW-
Section name:.rsrc
Virtual address:0x001a4000
Physical address:0x0015a000
Physical size:0x00016000
Section permissions:R--
import_hash:2468274c33b93b6a7eee42f8862faaad
time_stamp:2019-09-02 15:22:39
entry_point_section:.text
entry_point_section:.text
image_base:0x400000
entry_point:0xea9b7
name:TEXTINCLUDE
language:LANG_CHINESE
filetype:ASCII text, with no line terminators
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001a4bf4
size:0x0000000b
name:TEXTINCLUDE
language:LANG_CHINESE
filetype:C source, ASCII text, with CRLF line terminators
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001a4c00
size:0x00000016
name:TEXTINCLUDE
language:LANG_CHINESE
filetype:C source, ASCII text, with CRLF line terminators
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001a4c18
size:0x00000151
name:RT_CURSOR
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001a4d6c
size:0x00000134
name:RT_CURSOR
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001a4ea0
size:0x00000134
name:RT_CURSOR
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001a4fd4
size:0x00000134
name:RT_CURSOR
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001a5108
size:0x000000b4
name:RT_BITMAP
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001a51bc
size:0x0000016c
name:RT_BITMAP
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001a5328
size:0x00000248
name:RT_BITMAP
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001a5570
size:0x00000144
name:RT_BITMAP
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001a56b4
size:0x00000158
name:RT_BITMAP
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001a580c
size:0x00000158
name:RT_BITMAP
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001a5964
size:0x00000158
name:RT_BITMAP
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001a5abc
size:0x00000158
name:RT_BITMAP
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001a5c14
size:0x00000158
name:RT_BITMAP
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001a5d6c
size:0x00000158
name:RT_BITMAP
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001a5ec4
size:0x00000158
name:RT_BITMAP
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001a601c
size:0x00000158
name:RT_BITMAP
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001a6174
size:0x000005e4
name:RT_BITMAP
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001a6758
size:0x000000b8
name:RT_BITMAP
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001a6810
size:0x0000016c
name:RT_BITMAP
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001a697c
size:0x00000144
name:RT_ICON
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001a6ac0
size:0x000002e8
name:RT_ICON
language:LANG_CHINESE
filetype:GLS_BINARY_LSB_FIRST
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001a6da8
size:0x00000128
name:RT_ICON
language:LANG_NEUTRAL
filetype:dBase III DBT, version number 0, next free block index 40
sublanguage:SUBLANG_NEUTRAL
offset:0x001a6ed0
size:0x00010828
name:RT_MENU
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001b76f8
size:0x0000000c
name:RT_MENU
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001b7704
size:0x00000284
name:RT_DIALOG
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001b7988
size:0x00000098
name:RT_DIALOG
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001b7a20
size:0x0000017a
name:RT_DIALOG
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001b7b9c
size:0x000000fa
name:RT_DIALOG
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001b7c98
size:0x000000ea
name:RT_DIALOG
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001b7d84
size:0x000008ae
name:RT_DIALOG
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001b8634
size:0x000000b2
name:RT_DIALOG
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001b86e8
size:0x000000cc
name:RT_DIALOG
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001b87b4
size:0x000000b2
name:RT_DIALOG
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001b8868
size:0x000000e2
name:RT_DIALOG
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001b894c
size:0x0000018c
name:RT_STRING
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001b8ad8
size:0x00000050
name:RT_STRING
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001b8b28
size:0x0000002c
name:RT_STRING
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001b8b54
size:0x00000078
name:RT_STRING
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001b8bcc
size:0x000001c4
name:RT_STRING
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001b8d90
size:0x0000012a
name:RT_STRING
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001b8ebc
size:0x00000146
name:RT_STRING
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001b9004
size:0x00000040
name:RT_STRING
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001b9044
size:0x00000064
name:RT_STRING
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001b90a8
size:0x000001d8
name:RT_STRING
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001b9280
size:0x00000114
name:RT_STRING
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001b9394
size:0x00000024
name:RT_GROUP_CURSOR
language:LANG_CHINESE
filetype:Lotus unknown worksheet or configuration, revision 0x1
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001b93b8
size:0x00000014
name:RT_GROUP_CURSOR
language:LANG_CHINESE
filetype:Lotus unknown worksheet or configuration, revision 0x1
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001b93cc
size:0x00000014

About VirSCAN | Privacy Policy | Contact us | Links | Help VirSCAN
Powered By CentOSpol

京ICP备11007605号-12

pol

京公网安备 11010802020746号