Masscan exe Virtool NetTool Malware Analyse: 7c5b1c7b9998d79e7335dff0b03cd753

Masscan.exe Virtool NetTool Malware-Analyse

Aktualisiert 3 months ago

Geprüft von Malware Check

masscan.exe

Hash-Typ	Wert	Aktion
MD5	7c5b1c7b9998d79e7335dff0b03cd753
SHA1	883a4dbaffb5fe4585aa02c18568c5a987e711c7
SHA256	0a4767eaad71ddc73f78b88fc9f09393d55f3361f8961765699462b94f7667c5
SHA512	831d5026259b02dd868db4963c624270937ad348c9a486f3904222a599015cfeabe849b205e39c6a1c71dbdfc818058bc8588bf10aeff25ec38619082b5ad5a4
ImpHash	92069e321a667cb453a1e3cf8868337e

Hash-Typ

Wert

Aktion

MD5

7c5b1c7b9998d79e7335dff0b03cd753

SHA1

883a4dbaffb5fe4585aa02c18568c5a987e711c7

SHA256

0a4767eaad71ddc73f78b88fc9f09393d55f3361f8961765699462b94f7667c5

SHA512

831d5026259b02dd868db4963c624270937ad348c9a486f3904222a599015cfeabe849b205e39c6a1c71dbdfc818058bc8588bf10aeff25ec38619082b5ad5a4

ImpHash

92069e321a667cb453a1e3cf8868337e

PE-Analyse

Grundlegende Informationen

▼

Bildbasis	`0x140000000`
Einstiegspunkt	`0x1400013f0`
Kompilierungszeit	2023-11-12 13:18:41
Prüfsumme	0x00235658 (Tatsächlich: 0x00235658)
OS-Version	4.0
PEiD-Signaturen	`PE32+ executable (console) x86-64, for MS Windows`
Digitale Signatur	No valid SignedData structure was found.
Importe	4 Bibliotheken IPHLPAPI, KERNEL32, msvcrt, WS2_32
Exporte	0 Funktionen
Ressourcen	1 Ressourcen
Abschnitte	20 Abschnitte

PE-Abschnitte

▼

Name	Virtuelle Adresse	Virtuelle Größe	Rohgröße	Entropie	Eigenschaften	MD5
`.text`	`0x00001000`	305,288 bytes	305,664 bytes	6.33 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`06DDFC7D8465178EF96B5A4D8F6763B5`
`.data`	`0x0004c000`	17,728 bytes	17,920 bytes	4.77 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`4AFAC085D5AD12BA3EBBA5649CB3BFBF`
`.rdata`	`0x00051000`	122,000 bytes	122,368 bytes	6.65 (Komprimiert)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`A8F37ECC516D7139209806D7C75B4D22`
`.pdata`	`0x0006f000`	9,948 bytes	10,240 bytes	5.52 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`983FE8AB825B5E1E575AA3663D85EA9F`
`.xdata`	`0x00072000`	10,556 bytes	10,752 bytes	4.47 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`10E68CFB478E427A9A454773AAABAA72`
`.bss`	`0x00075000`	1,056,416 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_UNINITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x00177000`	4,348 bytes	4,608 bytes	4.22 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`21B75278EE4A86AC7217153C4B4A3927`
`.CRT`	`0x00179000`	96 bytes	512 bytes	0.32 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`5BE9CF57B4FBB17DB1F4C1463814B831`
`.tls`	`0x0017a000`	16 bytes	512 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`BF619EAC0CDF3F68D496EA9344137E8B`
`.rsrc`	`0x0017b000`	1,256 bytes	1,536 bytes	4.78 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`D014DB1D2B139803E858E098FABF6159`
`.reloc`	`0x0017c000`	2,212 bytes	2,560 bytes	5.11 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`E09701601E9AF602C25AC6DF13FA7EE3`
`/4`	`0x0017d000`	7,232 bytes	7,680 bytes	2.21 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`239E10FD4E183980F9A8A745991E6DAD`
`/19`	`0x0017f000`	885,429 bytes	885,760 bytes	5.81 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`78BC16E7AF3F6F79AA18FAC6D0424F81`
`/31`	`0x00258000`	113,033 bytes	113,152 bytes	4.87 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`D72D3048BAC64E704F64D95EC0FCD84B`
`/45`	`0x00274000`	252,028 bytes	252,416 bytes	5.20 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`88FCC17C86748A60CA3575B1FAADDF6A`
`/57`	`0x002b2000`	56,232 bytes	56,320 bytes	4.82 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`8FD9CBED2671432EBA5B10E4CDEF7D2F`
`/70`	`0x002c0000`	11,734 bytes	11,776 bytes	4.50 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`6532492C11D46ED7CC3C301628D474CF`
`/81`	`0x002c3000`	50,864 bytes	51,200 bytes	5.13 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`42F1E327613DD5E114248BD14D2AD7F1`
`/97`	`0x002d0000`	261,318 bytes	261,632 bytes	5.91 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`6B959879F58DF31906B0FD7FC1D3D784`
`/113`	`0x00310000`	18,356 bytes	18,432 bytes	6.32 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`5EA234E89713D33F0AEB58462B191237`

Entropie-Analyse-Warnung

1 Abschnitt(e) mit erhöhter Entropie (≥6.5) - mögliche Komprimierung

Ressourcenanalyse

▼

Gesamtressourcen: 1 (1,167 Bytes)

Ressourcentyp	Anzahl	Gesamtgröße	Prozentsatz
RT_MANIFEST	1	1,167 Bytes	100%

Zertifikatsketten-Analyse

▼

Keine digitalen Signaturen

Diese Datei ist nicht digital signiert.

Sicherheitsauswirkungen:

Kann die Identität des Herausgebers nicht verifizieren
Erhöhtes Sicherheitsrisiko beim Ausführen dieser Datei
Kann Sicherheitswarnungen auf einigen Systemen auslösen

⚠ Diese Datei hat entweder keine digitale Signatur oder die Zertifikatskette konnte nicht verifiziert werden.
Seien Sie vorsichtig beim Ausführen unsignierter Dateien aus unbekannten Quellen.

Zertifikat-Verifizierungsstatus

No valid SignedData structure was found.

Empfehlung: Überprüfen Sie die Dateiquelle und stellen Sie sicher, dass sie von einem vertrauenswürdigen Herausgeber stammt.

Kommentar hinterlassen

Dateiname	masscan.exe
Dateityp	PE32+ executable (console) x86-64, for MS Windows
Scanner-Version	1.0.226.174
Datenbankversion	2025-09-28 17:00:25 UTC

Masscan.exe Virtool NetTool Malware-Analyse

Technische Analyse

Virtool.Win64.NetTool.cld

Weitere Datei scannen

Dateiidentifikation