VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

Language
Server load
Server Load
VirSCAN
VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

523aa500eb4c1f4cae911bbfeff2c550    Threatbook file behavior analysis report

Basic Information

file name: 523aa500eb4c1f4cae911bbfeff2c550
file type: EXEx86
Threat level: malicious
MD5: 523aa500eb4c1f4cae911bbfeff2c550
sha256: 811beffe7be1cba0a808693981505fda5facc6f0969ea17ddb686397237daec3

Document Threat Intelligence IOC Report

No intelligence IOC detected

Intelligence decision system

Undetected intelligence determination system

Network behavior report

domains
ip:
domain: irc.lcirc.net
dns
type: A
request: irc.lcirc.net
http: 0
udp: 0
smtp: 0
icmp: 0
irc: 0
hosts: 0

Document release report

File release report not detected

File process number report

nofind

Document behavior signature report

No file behavior report detected

Static information

Section name: CODE
Virtual address: 0x00001000
Physical address: 0x00000400
Physical size: 0x00005600
Section permissions: RW-
Section name: DATA
Virtual address: 0x0000b000
Physical address: 0x00005a00
Physical size: 0x00000200
Section permissions: RW-
Section name: BSS
Virtual address: 0x0000c000
Physical address: 0x00005c00
Physical size: 0x00000000
Section permissions: RW-
Section name: .idata
Virtual address: 0x0000e000
Physical address: 0x00005c00
Physical size: 0x00000600
Section permissions: RW-
Section name: .tls
Virtual address: 0x0000f000
Physical address: 0x00006200
Physical size: 0x00000000
Section permissions: RW-
Section name: .rdata
Virtual address: 0x00010000
Physical address: 0x00006200
Physical size: 0x00000200
Section permissions: RW-
Section name: .rsrc
Virtual address: 0x00012000
Physical address: 0x00006400
Physical size: 0x00000400
Section permissions: RW-
Section name:
Virtual address: 0x00013000
Physical address: 0x00006800
Physical size: 0x00002400
Section permissions: RW-
import_hash: 3c0e70bfa5f73f1f1cef484e2bcb5bf8
time_stamp: 1992-06-20 06:22:17
entry_point_section:
image_base: 0x400000
entry_point: 0x14bd6
name: RT_ICON
language: LANG_ENGLISH
filetype: dBase IV DBT of @.DBF, block length 512, next free block index 40, next free block 49, next used block 48059
sublanguage: SUBLANG_ENGLISH_PHILIPPINES
offset: 0x000150be
size: 0x000002e8
name: RT_RCDATA
language: LANG_NEUTRAL
filetype: empty
sublanguage: SUBLANG_NEUTRAL
offset: 0x00012438
size: 0x00000010
name: RT_RCDATA
language: LANG_NEUTRAL
filetype: empty
sublanguage: SUBLANG_NEUTRAL
offset: 0x00012448
size: 0x000000a8
name: RT_GROUP_ICON
language: LANG_ENGLISH
filetype: data
sublanguage: SUBLANG_ENGLISH_PHILIPPINES
offset: 0x000150aa
size: 0x00000014