VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.
4, If your browser cannot upload files, please download VirSCAN uploader to upload.

Language
Server load
Server Load
VirSCAN
VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

00超级玛丽    Threatbook file behavior analysis report

Basic Information

file name: 00超级玛丽
file type: EXEx86
Threat level: malicious
MD5: 85ba0c03a0ef91ffc916fc0723cc59ba
sha256: 025b32794131c7d5e6d1865649d89085e077b4873ae91037f984cd953ccc7956

Document Threat Intelligence IOC Report

No intelligence IOC detected

Intelligence decision system

Undetected intelligence determination system

Network behavior report

domains: 0

Document release report

File release report not detected

File process number report

nofind

Document behavior signature report

No file behavior report detected

Static information

Section name: .code
Virtual address: 0x00001000
Physical address: 0x00000400
Physical size: 0x00000800
Section permissions: R-E
Section name: .text
Virtual address: 0x00002000
Physical address: 0x00000c00
Physical size: 0x00001a00
Section permissions: R-E
Section name: .rdata
Virtual address: 0x00004000
Physical address: 0x00002600
Physical size: 0x00000200
Section permissions: R--
Section name: .data
Virtual address: 0x00005000
Physical address: 0x00002800
Physical size: 0x00000800
Section permissions: RW-
Section name: .rsrc
Virtual address: 0x00006000
Physical address: 0x00003000
Physical size: 0x00000400
Section permissions: R--
Section name: .xObf
Virtual address: 0x00007000
Physical address: 0x00003400
Physical size: 0x00007a00
Section permissions: RWE
import_hash: a8f69eb2cf9f30ea96961c86b4347282
time_stamp: 2011-04-03 20:07:51
entry_point_section: .code
image_base: 0x400000
entry_point: 0x1000
name: RT_MANIFEST
language: LANG_ENGLISH
filetype: XML 1.0 document, ASCII text
sublanguage: SUBLANG_ENGLISH_US
offset: 0x00006058
size: 0x00000263