VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

Language
Server load
Server Load
VirSCAN
VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

抓ck.exe    Threatbook file behavior analysis report

Basic Information

file name: 抓ck.exe
file type: EXEx86
Threat level: suspicious
MD5: a9ba2441b6a537a08cd1f4887389517b
sha256: 109234c29662b3f7563d2f56f37f6a2d2ff6b6837df71fbca1c1a74695b413f5

Document Threat Intelligence IOC Report

No intelligence IOC detected

Intelligence decision system

Undetected intelligence determination system

Network behavior report

domains: 0

Document release report

File release report not detected

File process number report

nofind

Document behavior signature report

No file behavior report detected

Static information

Section name: .text
Virtual address: 0x00001000
Physical address: 0x00001000
Physical size: 0x0008e000
Section permissions: R-E
Section name: .rdata
Virtual address: 0x0008f000
Physical address: 0x0008f000
Physical size: 0x0092d000
Section permissions: R--
Section name: .data
Virtual address: 0x009bc000
Physical address: 0x009bc000
Physical size: 0x00012000
Section permissions: RW-
Section name: .rsrc
Virtual address: 0x009de000
Physical address: 0x009ce000
Physical size: 0x00006000
Section permissions: R--
import_hash: 0cef4afa20568256c9fb52de039cf891
time_stamp: 2020-01-29 18:55:30
entry_point_section: .text
image_base: 0x400000
entry_point: 0x6ecf3
name: TEXTINCLUDE
language: LANG_CHINESE
filetype: ASCII text, with no line terminators
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009debfc
size: 0x0000000b
name: TEXTINCLUDE
language: LANG_CHINESE
filetype: C source, ASCII text, with CRLF line terminators
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009dec08
size: 0x00000016
name: TEXTINCLUDE
language: LANG_CHINESE
filetype: C source, ASCII text, with CRLF line terminators
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009dec20
size: 0x00000151
name: RT_CURSOR
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009ded74
size: 0x00000134
name: RT_CURSOR
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009deea8
size: 0x00000134
name: RT_CURSOR
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009defdc
size: 0x00000134
name: RT_CURSOR
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009df110
size: 0x000000b4
name: RT_BITMAP
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009df1c4
size: 0x00000248
name: RT_BITMAP
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009df40c
size: 0x00000144
name: RT_BITMAP
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009df550
size: 0x00000158
name: RT_BITMAP
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009df6a8
size: 0x00000158
name: RT_BITMAP
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009df800
size: 0x00000158
name: RT_BITMAP
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009df958
size: 0x00000158
name: RT_BITMAP
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009dfab0
size: 0x00000158
name: RT_BITMAP
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009dfc08
size: 0x00000158
name: RT_BITMAP
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009dfd60
size: 0x00000158
name: RT_BITMAP
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009dfeb8
size: 0x00000158
name: RT_BITMAP
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009e0010
size: 0x000005e4
name: RT_BITMAP
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009e05f4
size: 0x000000b8
name: RT_BITMAP
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009e06ac
size: 0x0000016c
name: RT_BITMAP
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009e0818
size: 0x00000144
name: RT_ICON
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009e095c
size: 0x000002e8
name: RT_ICON
language: LANG_CHINESE
filetype: GLS_BINARY_LSB_FIRST
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009e0c44
size: 0x00000128
name: RT_ICON
language: LANG_NEUTRAL
filetype: GLS_BINARY_LSB_FIRST
sublanguage: SUBLANG_NEUTRAL
offset: 0x009e0d6c
size: 0x00000128
name: RT_ICON
language: LANG_NEUTRAL
filetype: data
sublanguage: SUBLANG_NEUTRAL
offset: 0x009e0e94
size: 0x000002e8
name: RT_ICON
language: LANG_NEUTRAL
filetype: dBase IV DBT of `.DBF, block length 1536, next free block index 40, next free block 0, next used block 0
sublanguage: SUBLANG_NEUTRAL
offset: 0x009e117c
size: 0x00000668
name: RT_MENU
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009e17e4
size: 0x0000000c
name: RT_MENU
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009e17f0
size: 0x00000284
name: RT_DIALOG
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009e1a74
size: 0x00000098
name: RT_DIALOG
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009e1b0c
size: 0x0000017a
name: RT_DIALOG
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009e1c88
size: 0x000000fa
name: RT_DIALOG
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009e1d84
size: 0x000000ea
name: RT_DIALOG
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009e1e70
size: 0x000008ae
name: RT_DIALOG
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009e2720
size: 0x000000b2
name: RT_DIALOG
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009e27d4
size: 0x000000cc
name: RT_DIALOG
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009e28a0
size: 0x000000b2
name: RT_DIALOG
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009e2954
size: 0x000000e2
name: RT_DIALOG
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009e2a38
size: 0x0000018c
name: RT_STRING
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009e2bc4
size: 0x00000050
name: RT_STRING
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009e2c14
size: 0x0000002c
name: RT_STRING
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009e2c40
size: 0x00000078
name: RT_STRING
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009e2cb8
size: 0x000001c4
name: RT_STRING
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009e2e7c
size: 0x0000012a
name: RT_STRING
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009e2fa8
size: 0x00000146
name: RT_STRING
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009e30f0
size: 0x00000040
name: RT_STRING
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009e3130
size: 0x00000064
name: RT_STRING
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009e3194
size: 0x000001d8
name: RT_STRING
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009e336c
size: 0x00000114
name: RT_STRING
language: LANG_CHINESE
filetype: data
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009e3480
size: 0x00000024
name: RT_GROUP_CURSOR
language: LANG_CHINESE
filetype: Lotus unknown worksheet or configuration, revision 0x1
sublanguage: SUBLANG_CHINESE_SIMPLIFIED
offset: 0x009e34a4
size: 0x00000014