VirSCAN VirSCAN

1, 您可以上傳任何檔案,但是檔案大小不能超過20MB。
2, 我們支援RAR或ZIP壓縮檔案格式的自動解壓縮,但壓縮檔案中不能夾帶超過20個檔案。
3, 我們可以辨識並檢測密碼為 'infected' 或 'virus' 的壓縮檔案。
4, 如果您的瀏覽器無法上傳文件,請下載Virscan Uploader進行上傳。

選擇語言
伺服器負載程度
Server Load
VirSCAN
VirSCAN

1, 您可以上傳任何檔案,但是檔案大小不能超過20MB。
2, 我們支援RAR或ZIP壓縮檔案格式的自動解壓縮,但壓縮檔案中不能夾帶超過20個檔案。
3, 我們可以辨識並檢測密碼為 'infected' 或 'virus' 的壓縮檔案。

00超人钢铁之躯    微步文件行為分析報告

基本信息

文件名稱: 00超人钢铁之躯
文件類型: EXEx86
威脅等級: malicious
MD5: 734ad1cbf73fd1c53ade8b31887ea45e
sha256: 006d88eb3488ea9657483f901f1c823ccaf03947b11ff7bfdacf6c66f389875d

文件威脅情報IOC報告

未檢測到情報IOC

情報判定係統

未檢測到情報判定係統

網絡行為報告

domains: 0

文件釋放報告

未檢測到文件釋放報告

文件進程數報告

nofind

文件行為簽名報告

未檢測到文件行為報告

靜態信息

節名: .text
虛擬地址: 0x00001000
物理地址: 0x00000400
物理大小: 0x00087200
節權限: R-E
節名: .itext
虛擬地址: 0x00089000
物理地址: 0x00087600
物理大小: 0x00000a00
節權限: R-E
節名: .data
虛擬地址: 0x0008a000
物理地址: 0x00088000
物理大小: 0x00002a00
節權限: RW-
節名: .bss
虛擬地址: 0x0008d000
物理地址: 0x0008aa00
物理大小: 0x00000000
節權限: RW-
節名: .idata
虛擬地址: 0x00093000
物理地址: 0x0008aa00
物理大小: 0x00003200
節權限: RW-
節名: .tls
虛擬地址: 0x00097000
物理地址: 0x0008dc00
物理大小: 0x00000000
節權限: RW-
節名: .rdata
虛擬地址: 0x00098000
物理地址: 0x0008dc00
物理大小: 0x00000200
節權限: R--
節名: .rsrc
虛擬地址: 0x00099000
物理地址: 0x0008de00
物理大小: 0x00024000
節權限: R--
import_hash: 3c8577ca4bab2f95cc6fc73ef1895288
time_stamp: 2008-07-23 23:21:46
entry_point_section: .itext
image_base: 0x400000
entry_point: 0x89990
name: RT_CURSOR
language: LANG_ENGLISH
filetype: data
sublanguage: SUBLANG_ENGLISH_US
offset: 0x00099884
size: 0x00000134
name: RT_CURSOR
language: LANG_ENGLISH
filetype: data
sublanguage: SUBLANG_ENGLISH_US
offset: 0x000999b8
size: 0x00000134
name: RT_CURSOR
language: LANG_ENGLISH
filetype: data
sublanguage: SUBLANG_ENGLISH_US
offset: 0x00099aec
size: 0x00000134
name: RT_CURSOR
language: LANG_ENGLISH
filetype: data
sublanguage: SUBLANG_ENGLISH_US
offset: 0x00099c20
size: 0x00000134
name: RT_CURSOR
language: LANG_ENGLISH
filetype: data
sublanguage: SUBLANG_ENGLISH_US
offset: 0x00099d54
size: 0x00000134
name: RT_CURSOR
language: LANG_ENGLISH
filetype: data
sublanguage: SUBLANG_ENGLISH_US
offset: 0x00099e88
size: 0x00000134
name: RT_CURSOR
language: LANG_ENGLISH
filetype: data
sublanguage: SUBLANG_ENGLISH_US
offset: 0x00099fbc
size: 0x00000134
name: RT_ICON
language: LANG_DUTCH
filetype: GLS_BINARY_LSB_FIRST
sublanguage: SUBLANG_DUTCH
offset: 0x0009a0f0
size: 0x00000128
name: RT_ICON
language: LANG_DUTCH
filetype: GLS_BINARY_LSB_FIRST
sublanguage: SUBLANG_DUTCH
offset: 0x0009a218
size: 0x00000568
name: RT_ICON
language: LANG_DUTCH
filetype: data
sublanguage: SUBLANG_DUTCH
offset: 0x0009a780
size: 0x000002e8
name: RT_ICON
language: LANG_DUTCH
filetype: data
sublanguage: SUBLANG_DUTCH
offset: 0x0009aa68
size: 0x000008a8
name: RT_ICON
language: LANG_DUTCH
filetype: data
sublanguage: SUBLANG_DUTCH
offset: 0x0009b310
size: 0x00000ea8
name: RT_ICON
language: LANG_DUTCH
filetype: dBase IV DBT of `.DBF, block length 1536, next free block index 40, next free block 57599, next used block 256
sublanguage: SUBLANG_DUTCH
offset: 0x0009c1b8
size: 0x00000668
name: RT_STRING
language: LANG_NEUTRAL
filetype: data
sublanguage: SUBLANG_NEUTRAL
offset: 0x0009c820
size: 0x0000005c
name: RT_STRING
language: LANG_NEUTRAL
filetype: data
sublanguage: SUBLANG_NEUTRAL
offset: 0x0009c87c
size: 0x0000043c
name: RT_STRING
language: LANG_NEUTRAL
filetype: data
sublanguage: SUBLANG_NEUTRAL
offset: 0x0009ccb8
size: 0x000002d8
name: RT_STRING
language: LANG_NEUTRAL
filetype: data
sublanguage: SUBLANG_NEUTRAL
offset: 0x0009cf90
size: 0x000000c0
name: RT_STRING
language: LANG_NEUTRAL
filetype: data
sublanguage: SUBLANG_NEUTRAL
offset: 0x0009d050
size: 0x00000158
name: RT_STRING
language: LANG_NEUTRAL
filetype: data
sublanguage: SUBLANG_NEUTRAL
offset: 0x0009d1a8
size: 0x00000494
name: RT_STRING
language: LANG_NEUTRAL
filetype: data
sublanguage: SUBLANG_NEUTRAL
offset: 0x0009d63c
size: 0x00000360
name: RT_STRING
language: LANG_NEUTRAL
filetype: data
sublanguage: SUBLANG_NEUTRAL
offset: 0x0009d99c
size: 0x00000374
name: RT_STRING
language: LANG_NEUTRAL
filetype: data
sublanguage: SUBLANG_NEUTRAL
offset: 0x0009dd10
size: 0x00000418
name: RT_STRING
language: LANG_NEUTRAL
filetype: data
sublanguage: SUBLANG_NEUTRAL
offset: 0x0009e128
size: 0x00000140
name: RT_STRING
language: LANG_NEUTRAL
filetype: data
sublanguage: SUBLANG_NEUTRAL
offset: 0x0009e268
size: 0x000000cc
name: RT_STRING
language: LANG_NEUTRAL
filetype: data
sublanguage: SUBLANG_NEUTRAL
offset: 0x0009e334
size: 0x000001ec
name: RT_STRING
language: LANG_NEUTRAL
filetype: data
sublanguage: SUBLANG_NEUTRAL
offset: 0x0009e520
size: 0x000003b0
name: RT_STRING
language: LANG_NEUTRAL
filetype: data
sublanguage: SUBLANG_NEUTRAL
offset: 0x0009e8d0
size: 0x00000354
name: RT_STRING
language: LANG_NEUTRAL
filetype: data
sublanguage: SUBLANG_NEUTRAL
offset: 0x0009ec24
size: 0x000002b4
name: RT_RCDATA
language: LANG_NEUTRAL
filetype: data
sublanguage: SUBLANG_NEUTRAL
offset: 0x0009eed8
size: 0x00000010
name: RT_RCDATA
language: LANG_NEUTRAL
filetype: data
sublanguage: SUBLANG_NEUTRAL
offset: 0x0009eee8
size: 0x0000033c
name: RT_RCDATA
language: LANG_NEUTRAL
filetype: Delphi compiled form 'TmmrForm'
sublanguage: SUBLANG_NEUTRAL
offset: 0x0009f224
size: 0x0001d7f9
name: RT_GROUP_CURSOR
language: LANG_ENGLISH
filetype: Lotus unknown worksheet or configuration, revision 0x1
sublanguage: SUBLANG_ENGLISH_US
offset: 0x000bca20
size: 0x00000014
name: RT_GROUP_CURSOR
language: LANG_ENGLISH
filetype: Lotus unknown worksheet or configuration, revision 0x1
sublanguage: SUBLANG_ENGLISH_US
offset: 0x000bca34
size: 0x00000014
name: RT_GROUP_CURSOR
language: LANG_ENGLISH
filetype: Lotus unknown worksheet or configuration, revision 0x1
sublanguage: SUBLANG_ENGLISH_US
offset: 0x000bca48
size: 0x00000014
name: RT_GROUP_CURSOR
language: LANG_ENGLISH
filetype: Lotus unknown worksheet or configuration, revision 0x1
sublanguage: SUBLANG_ENGLISH_US
offset: 0x000bca5c
size: 0x00000014
name: RT_GROUP_CURSOR
language: LANG_ENGLISH
filetype: Lotus unknown worksheet or configuration, revision 0x1
sublanguage: SUBLANG_ENGLISH_US
offset: 0x000bca70
size: 0x00000014
name: RT_GROUP_CURSOR
language: LANG_ENGLISH
filetype: Lotus unknown worksheet or configuration, revision 0x1
sublanguage: SUBLANG_ENGLISH_US
offset: 0x000bca84
size: 0x00000014
name: RT_GROUP_CURSOR
language: LANG_ENGLISH
filetype: Lotus unknown worksheet or configuration, revision 0x1
sublanguage: SUBLANG_ENGLISH_US
offset: 0x000bca98
size: 0x00000014
name: RT_GROUP_ICON
language: LANG_DUTCH
filetype: data
sublanguage: SUBLANG_DUTCH
offset: 0x000bcaac
size: 0x0000005a
name: RT_MANIFEST
language: LANG_DUTCH
filetype: XML 1.0 document, ASCII text, with CRLF line terminators
sublanguage: SUBLANG_DUTCH
offset: 0x000bcb08
size: 0x00000351